Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.security > #5740

Re: Why no security support for binutils? What to do about it?

From Florian Weimer <fw@deneb.enyo.de>
Newsgroups linux.debian.security
Subject Re: Why no security support for binutils? What to do about it?
Date 2020-01-01 14:20 +0100
Message-ID <zjM4N-3tf-5@gated-at.bofh.it> (permalink)
References <zjf8R-fn-1@gated-at.bofh.it> <zjmk1-4wN-1@gated-at.bofh.it> <zjBM5-5wb-1@gated-at.bofh.it> <zjLV8-3pY-15@gated-at.bofh.it> <zjM4N-3tf-7@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


* Daniel Reichelt:

>> Some of its checks look inherently dangerous, e.g. the bash -n
>> check for shell syntax.
>
> Why would bash -n be dangerous?

In the past, the bash parser was not very successful at inhibiting
command execution.  I doubt that this has changed, although some
corner cases have been fixed.

Back to linux.debian.security | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Why no security support for binutils? What to do about it? Andreas <goesele@hfph.mwn.de> - 2019-12-31 03:10 +0100
  Re: Why no security support for binutils? What to do about it? Florian Weimer <fw@deneb.enyo.de> - 2019-12-31 10:50 +0100
    Re: Why no security support for binutils? What to do about it? Paul Wise <pabs@debian.org> - 2020-01-01 03:20 +0100
      Re: Why no security support for binutils? What to do about it? Elmar Stellnberger <estellnb@gmail.com> - 2020-01-01 10:40 +0100
        Re: Why no security support for binutils? What to do about it? PJ <peer@pjk.de> - 2020-01-01 11:00 +0100
          Re: Why no security support for binutils? What to do about it? Elmar Stellnberger <estellnb@gmail.com> - 2020-01-01 11:10 +0100
        Re: Why no security support for binutils? What to do about it? Davide Prina <davide.prina@gmail.com> - 2020-01-01 13:40 +0100
        Re: Why no security support for binutils? What to do about it? Paul Wise <pabs@debian.org> - 2020-01-02 02:40 +0100
      Re: Why no security support for binutils? What to do about it? Florian Weimer <fw@deneb.enyo.de> - 2020-01-01 14:10 +0100
        Re: Why no security support for binutils? What to do about it? Florian Weimer <fw@deneb.enyo.de> - 2020-01-01 14:20 +0100
        Re: Why no security support for binutils? What to do about it? Paul Wise <pabs@debian.org> - 2020-01-01 14:20 +0100
          Re: Why no security support for binutils? What to do about it? Florian Weimer <fw@deneb.enyo.de> - 2020-01-01 14:30 +0100
        Re: Why no security support for binutils? What to do about it? Daniel Reichelt <debian@nachtgeist.net> - 2020-01-01 14:50 +0100

csiph-web