A set of security vulnerabilities have been found in the current (as well as older) versions of the glibc that most modern Linux distributions are based on.
As disabling all suid programs heavily effects our systems, it would be good to know if the vulnerabilities are only with local attackers or apply also to attacks from outside. Is that known?
It's about local bugs only, as far as it's known by now.
Best, Frank
Grüße, Roman. -- - - | Roman Drahtmüller <draht@suse.de> "Caution: Cape does not | SuSE GmbH - Security enable user to fly." | Nürnberg, Germany (Batman Costume warning label) | - -