Overview
Request 53414 accepted
- remove no longer needed patches
- fix capabilities patch: first switch uid then drop caps.
- update to version s20100418
* ping,ping6: avoid gethostbyaddr during ping flood.
* arping: Set correct broadcast address.
* tracepath: Fix some small typos in tracepath.sgml.
* ping: Fix resource consumption triggered by specially crafted ICMP
Echo Reply (CVE-2010-2529)
- don't install fscaps, rely on /etc/permissions handling instead
- compile using -fno-strict-aliasing
- drop capabilities unconditionally (bnc#645423)
- spec file cleanup
- Use POSIX capabilities instead of SUID for ping
Request History
coolo created request
- remove no longer needed patches
- fix capabilities patch: first switch uid then drop caps.
- update to version s20100418
* ping,ping6: avoid gethostbyaddr during ping flood.
* arping: Set correct broadcast address.
* tracepath: Fix some small typos in tracepath.sgml.
* ping: Fix resource consumption triggered by specially crafted ICMP
Echo Reply (CVE-2010-2529)
- don't install fscaps, rely on /etc/permissions handling instead
- compile using -fno-strict-aliasing
- drop capabilities unconditionally (bnc#645423)
- spec file cleanup
- Use POSIX capabilities instead of SUID for ping
oertel accepted request
Accepted submit request 53414 from user coolo