Re: Vulnrability in all known Linux distributions

[thomas () cuivre fdn fr (Thomas Quinot)]

Alan Brown (alan () manawatu planet org nz) écrit :

> > The problem in this case happens to be in the libc implementation of
> > realpath(), so I plan to post a patch against libc 5.3.12 shortly as well, and
> The current libc is 5.3.18, a patch against this would be better. :)

It might be worthwhile noting that a mount linked against GNU libc
(future libc 6) is _not_ vulnerable to this attack (presumably GNU libc
has a correct realpath()).

--
      Thomas.Quinot () Cuivre FdN FR       <URL:http://Web.FdN.FR/~tquinot/>