Re: [musl] Re: Busybox on musl is affected by CVE-2015-1817

2015-04-02 Thread Rich Felker
On Wed, Apr 01, 2015 at 10:49:40AM +0200, u-w...@aetey.se wrote: > Hi Harald, > > On Wed, Apr 01, 2015 at 10:11:51AM +0200, Harald Becker wrote: > > There is a big difference if you talk about suid > > *root* programs or other suid usage. > > > > The former is definitely very dangerous and should

Re: [musl] Re: Busybox on musl is affected by CVE-2015-1817

2015-03-31 Thread Rich Felker
On Wed, Apr 01, 2015 at 12:11:18AM +0100, Justin Cormack wrote: > On 31 March 2015 at 20:07, Denys Vlasenko wrote: > > On Mon, Mar 30, 2015 at 7:31 AM, Rich Felker wrote: > >> For details on CVE-2015-1817, see: > >> http://www.openwall.com/lists/musl/2015/03/30/1 > >> > >> With musl-linked Busybo