[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Is a realpath patch planned for 3.1?



Noting:
001: SECURITY FIX: August 4, 2003
An off-by-one error exists in the C library function realpath(3). Since this
same bug resulted in a root compromise in the wu-ftpd ftp server it is
possible that this bug may allow an attacker to gain escalated privileges on
OpenBSD.

Question:
I notice you have realpath patches for 3.2 and 3.3, is one
for 3.1 planned?  I have ben looking around the web site
for some sort of maintenance policy, but haven't found
one yet.

Thanks!

--
Vic Serbe
Trusted Computer Solutions, Inc.
Urbana, IL Office (217) 384-0028 x14
http://www.tcs-sec.com/ 



Visit your host, monkey.org