[lugm.org] Old security problems and new solutions

Ish Sookun ish at hacklog.in
Wed Apr 1 03:36:45 UTC 2015


Thank you for the good work[1] Logan :-)

As Logan specified xz is a widely used compression utility which might 
be exploited. Capsicum chips in to help containing the execution of code 
during compression/decompression in a "controlled" environment; thus not 
affecting the rest of the OS.

[1] 
http://git.tukaani.org/?p=xz.git;a=commit;h=1238381143a9a7ce84839c2582ccd56ff750a440

Regards,

-- 
​Ish Sookun

- Geek by birth, Linux by choice.
- I blog at HACKLOG.in.

https://twitter.com/IshSookun ^^ Do you tweet?




More information about the Discuss mailing list