Re: Release-critical Bugreport for November 26, 1999
Christian Kurz <shorty@debian.org> wrote:
>
>> Package: kernel-image-2.2.13 (main)
>> Maintainer: Herbert Xu <herbert@debian.org>
>> 49723 kernel: devpts module not installed by default
>> [FIXED] Fixed package kernel-image-2.2.13-i386 is in Incoming
> Herbert, has the new bug-fixing upload yet been done?
Well, as the tag says, it's in Incoming.
>> Package: libc6 (main)
>> Maintainer: Joel Klecker <debian-glibc@lists.debian.org>
>> 21810 libc6: rexec call dumps core with user="string" and password=NULL
> Need some more examination to find a solution, that doesn't open a
> security hole.
AFAIK, there aren't any security implications here if the strategy is to
copy the libc5 behaviour (my preference).
--
Debian GNU/Linux 2.1 is out! ( http://www.debian.org/ )
Email: Herbert Xu ~{PmV>HI~} <herbert@gondor.apana.org.au>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
Reply to: