New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[SA 2020-002] Security flaws in setuid wrappers (#943) #944

Merged

ikedas merged 2 commits into sympa-community:sympa-6.2 from ikedas:sa-2020-002

May 24, 2020

Member

ikedas commented May 24, 2020

This may fix #943 .

Setuid wrappers should clear environment variables to avoid exploits. Clear environment varialbes.
configure: Add options --disable-setuid_fcgi & --disable-setuid_queue.

ikedas added 2 commits

May 22, 2020 21:47


          Sympa SA 2020-002 (candidate): Setuid wrappers should clear environme…

3f8449c

…nt variables to avoid exploits.


          configure: Add options --disable-setuid_fcgi & --disable-setuid_queue

bc9579c

Member Author

ikedas commented May 24, 2020

Since this PR has been reviewed by Sympa security team, it will be merged immediately.

ikedas merged commit ff6b8d7 into sympa-community:sympa-6.2

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment