Re: [PATCH v2] busybox: fix TOCTOU race in various directory traversal
Sertonix via busybox <[email protected]> Sat, 02 May 2026 13:39:31 +0000
| Newsgroups | gmane.linux.busybox |
|---|---|
| Message-ID | <[email protected]> |
Previously uutils had similar TOCTOU races in multiple places but as far as I understand https://www.openwall.com/lists/oss-security/2026/05/02/2 they are trying to get rid of it. It would be nice to have this fixed in busybox before it is abused in the wild.