Re: security alerts in busybox
Aaro Koskinen via busybox <[email protected]> Fri, 24 Apr 2026 20:01:52 +0300
| Newsgroups | gmane.linux.busybox |
|---|---|
| Message-ID | <[email protected]> |
Hi, On Fri, Apr 24, 2026 at 04:40:47PM +0200, Roberto A. Foglietta via busybox wrote: > Are these false positives? Well, it is more about corner cases like > using the applet in a strong parallel mode like xargs -p8 does. If > used for maintenance on a large enough infrastructure, the corner case > has a chance to be met, for example. Busybox doesn't create threads, so ctime() is not a problem. I think you meant xargs -P and that forks. A.