[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

RC status of rpath issues

I've seen a couple of RC bugs being filed for rpath issues in various
packages. For stable-security these are only treated as DSA-worthy
if the rpath points to /tmp, but not towards a directory like /build
or a specific home directory, as exploiting these would require social
engineering against root. While they should of course be fixed where
possible I'd recommend against treating them as release critical per
se. (At least not in the sense they they're a reason for removing a
package from testing).


Reply to: