oss-sec mailing list archives
Re: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch
From: Steffen Nurpmeso <steffen () sdaoden eu>
Date: Tue, 16 Jul 2024 01:32:32 +0200
Demi Marie Obenour wrote in <ZpRSEWkkG6hmNhNo@itl-email>: |On Sat, Jul 13, 2024 at 10:58:58PM +0200, Steffen Nurpmeso wrote: |> Jacob Bachmeyer wrote in |> <6691E39C.8090600 () gmail com>: |>|Steffen Nurpmeso wrote: |>|> [...] ... |> Some findings: ... |> . I always whimper when i have to rm(1) a running executable before |> placing an updated variant on Linux, on BSDs i simply over-cp(1) |> (and i do not understand as long as one gets either the one or |> the other when executing the path). ... |> But it is ok to me, Linux is as it is[.] | |Executable files and shared libraries should _never_ be modified |in-place. They should _always_ be renamed over. Otherwise, a program |might be a mixture of the old and new version, with completely undefined |results when the program is run. So i am thankful i get this translucent impression of my Linux box and henceforth always use cp -f there, and cp on BSDs. Or is this a hint to GNU coreutils? (I rather would prefer either the one or the other, but not a messed up copy. Is that what they are doing?) --steffen | |Der Kragenbaer, The moon bear, |der holt sich munter he cheerfully and one by one |einen nach dem anderen runter wa.ks himself off |(By Robert Gernhardt)
Current thread:
- Re: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch, (continued)
- Re: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch Yves-Alexis Perez (Jul 10)
- Re: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch Will Dormann (Jul 10)
- Re: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch Yves-Alexis Perez (Jul 11)
- Re: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch Yves-Alexis Perez (Jul 11)
- Re: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch Will Dormann (Jul 10)
- Re: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch Steffen Nurpmeso (Jul 10)
- Re: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch David A. Wheeler (Jul 11)
- Re: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch Steffen Nurpmeso (Jul 12)
- Re: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch Jacob Bachmeyer (Jul 13)
- Re: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch Steffen Nurpmeso (Jul 13)
- Re: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch Demi Marie Obenour (Jul 14)
- Re: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch Steffen Nurpmeso (Jul 15)
- Re: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch Jacob Bachmeyer (Jul 14)
- Re: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch Steffen Nurpmeso (Jul 15)
- Re: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch Yves-Alexis Perez (Jul 10)
- Re: ASLRn't is still alive and well on x86 kernels, despite CVE-2024-26621 patch Will Dormann (Jul 30)
