Hi, Samuel Thibault: > Sounds crazy to me. > Definitely. This is now out in the wild; exploits which simply replace echo or cat-without-/bin are going to happen. :-/ Maybe we should add the patched version, with an appropriate NEWS entry, to backports? -- -- Matthias Urlichs
Attachment:
signature.asc
Description: Digital signature