Re: [SECURITY] Async-signal-unsafe operations in alrm_catcher() signal handler

Chet Ramey <[email protected]>
Newsgroups gmane.comp.shells.bash.bugs
Organization ITS, Case Western Reserve University
Message-ID <[email protected]>
On 8/28/26 4:42 PM, Collin Funk wrote:

> Hahaha. Another funny one was the critical vulnerability in GNU
> coreutils 'printf' using user input as a format string [1]. Maybe you
> should check the bash builtin for that one. :)

Lovely. Just exquisite.


-- 
``The lyf so short, the craft so long to lerne.'' - Chaucer
		 ``Ars longa, vita brevis'' - Hippocrates
Chet Ramey, UTech, CWRU    [email protected]    http://tiswww.cwru.edu/~chet/
OpenPGP_signature.asc (application/pgp-signature, 203 B)
-----BEGIN PGP SIGNATURE-----

wmMEABEIACMWIQR8ATX7CIqvbGbGULm7WGnwZOp0qwUCapHzVgUDAAAAAAAKCRC7WGnwZOp0q/c3
AJwLOPJMgnwcXNWgv5/vIle51U4oowCeKuXJB93EyTzjLQOEj/lWgZPgGec=
=He/V
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.