This is the mail archive of the libc-alpha@sourceware.org mailing list for the glibc project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

Re: Missing security fix in elf/dl-open.c?


On 02/27/2015 05:43 PM, Carlos O'Donell wrote:
>> However, something else already does this in Fedora 20
>> (glibc-2.20-7.fc21.x86_64, which lacks this patch as well AFAICT).  I
>> created a SUID binary with an $ORIGIN RPATH, and it is ignored, but only
>> when actually running SUID.
> 
> Likely the `glibc-fedora-elf-ORIGIN.patch` patch in Fedora.

Oooh!  Does it mean we should upstream this patch instead?

-- 
Florian Weimer / Red Hat Product Security


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]