oss-sec mailing list archives

Re: glibc $ORIGIN problem - CVE-2010-3847

From: Florian Weimer <fw () deneb enyo de>
Date: Fri, 22 Oct 2010 15:15:36 +0200

* Marcus Meissner:

Andreas Schwab of Redhat has posted candidate patches to fix the problems:
      http://sourceware.org/ml/libc-hacker/2010-10/msg00007.html
      http://sourceware.org/ml/libc-hacker/2010-10/msg00008.html


Is the second patch really required?  I'm building our updates without
that. 8-/

Current thread:

glibc $ORIGIN problem - CVE-2010-3847 Marcus Meissner (Oct 21)
- Re: glibc $ORIGIN problem - CVE-2010-3847 Robert Święcki (Oct 21)
- Re: glibc $ORIGIN problem - CVE-2010-3847 Florian Weimer (Oct 22)
  - Re: glibc $ORIGIN problem - CVE-2010-3847 Solar Designer (Oct 24)
    - Re: glibc $ORIGIN problem - CVE-2010-3847 Dmitry V. Levin (Oct 26)