Conversation
Notices
-
Embed this notice
翠星石 (suiseiseki@freesoftwareextremist.com)'s status on Saturday, 05-Jul-2025 00:58:34 JST 翠星石
@mia @snacks If it did complicated things with argv it could be vulnerable - but as it does a 3 byte read at most and either way it exits without calling suid(), there is no argv attack possible in the code.
Those glibc bugs were fixed.