What about LD_DEBUG?

[Paweł Sakowski]

Security advisories warn about a LD_DEBUG-related vulnerability in
glibc:

http://www.securitytracker.com/alerts/2004/Aug/1010975.html

Gentoo claims to have a fix:

http://www.gentoo.org/cgi-bin/viewcvs.cgi/sys-libs/glibc/files/glibc-sec-hotfix-20040804.patch?rev=1.2

Not everybody agrees it's the right solution, though:


-- 
+----------------------------------------------------------------------+
| PaweÂł Sakowski <pawel@sakowski.eu.org>            Never trust a man  |
|                            who can count up to 1023 on his fingers.  |
+----------------------------------------------------------------------+