Re: libltdl is inefficient and a security hazard

[Peter O'Gorman]

On 11/05/2009 05:18 PM, Bob Friesenhahn wrote:

> Am I missing something obvious? Why do I feel like no one is taking this
> security issue seriously at all? I first notified that libltdl was
> wrongly dlopening() with a bare archive file name on October 25th (and
> included system call traces from a number of systems) and it is November
> 5th already.

Hi Bob,

I thought you were going to propose patches for these issues, sorry.

I'll look into it.

Peter
--
Peter O'Gorman
http://pogma.com