diff options
| author | Eric Andersen | 2004-05-05 07:05:32 +0000 |
|---|---|---|
| committer | Eric Andersen | 2004-05-05 07:05:32 +0000 |
| commit | 6c8161d69fe9fce0f862b678aaa84866aaaeff8f (patch) | |
| tree | 28ca3d47c5325c070ffc3e84b136d8bed02a328f /scripts | |
| parent | 5ec58285c3990ebab9900295f1a1d32824338719 (diff) | |
| download | busybox-6c8161d69fe9fce0f862b678aaa84866aaaeff8f.zip busybox-6c8161d69fe9fce0f862b678aaa84866aaaeff8f.tar.gz | |
Steve Grubb writes:
Hello,
Last November a bug was found in iproute. CAN-2003-0856 has more information.
Basically, netlink packets can come from any user. If a program performs action
based on netlink packets, they must be examined to make sure they came from the
place they are expected (the kernel).
Attached is a patch against pre8. Please apply this before releasing 1.00 final.
All users of busy box may be vulnerable to local attacks without it.
Best Regards,
Steve Grubb
Diffstat (limited to 'scripts')
0 files changed, 0 insertions, 0 deletions