[clamav-users] Problems compiling 0.102.4 on OLD system
Michael Orlitzky
michael at orlitzky.com
Thu Jul 16 23:23:56 UTC 2020
On 2020-07-16 19:10, Michael Orlitzky via clamav-users wrote:
>
> Micah: openat() only provides "one level of safety" in that when opening
> /foo/bar/baz, it ensures that "baz" is where you think it is. You may
> want to investigate whether or not an attacker can replace "bar" by a
> symlink in that situation.
False alarm, I guess this is the problem that was reported because the
fix already traverses the path from the root upwards.
More information about the clamav-users
mailing list