Re: [SECURITY] [DSA 052-1] New sendfile packages fix root exploit

[Florian Weimer]

[EMAIL PROTECTED] writes:

> Package        : sendfile
> Vulnerability  : broken privileges dropping
> Problem-Type   : local root exploit
> Debian-specific: no

The author, Ulli Horlacher, released an updated version of sendfile
which corrects these problems a few months ago.  It's available from:

ftp://ftp.belwue.de/pub/unix/sendfile/

--
Florian Weimer                    [EMAIL PROTECTED]
University of Stuttgart           http://cert.uni-stuttgart.de/
RUS-CERT                          +49-711-685-5973/fax +49-711-685-5898