The ELF ld.so(1) fails to properly sanitize the environment.
Brad <[email protected]> Mon, 20 Nov 2006 22:14:09 -0500
| Newsgroups | gmane.os.openbsd.security.announce |
|---|---|
| Message-ID | <[email protected]> |
The ELF ld.so(1) fails to properly sanitize the environment. There is a potential localhost security problem in cases we have not found yet. This patch applies to all ELF-based systems (m68k, m88k, and vax are a.out-based systems). Patches for the respective releases: ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/005_ldso.patch ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.9/common/016_ldso.patch