Re: [SECURITY] [DSA 052-1] New sendfile packages fix root exploit

[Florian Weimer <Florian.Weimer () RUS UNI-STUTTGART DE>]

debian-security-announce () LISTS DEBIAN ORG writes:

> Package        : sendfile
> Vulnerability  : broken privileges dropping
> Problem-Type   : local root exploit
> Debian-specific: no

The author, Ulli Horlacher, released an updated version of sendfile
which corrects these problems a few months ago.  It's available from:

ftp://ftp.belwue.de/pub/unix/sendfile/

--
Florian Weimer                    Florian.Weimer () RUS Uni-Stuttgart DE
University of Stuttgart           http://cert.uni-stuttgart.de/
RUS-CERT                          +49-711-685-5973/fax +49-711-685-5898