Re:Git security vulnerability announced
by mishafb on Wednesday April 13, 2022 @01:11PM
(#31017249)
Daemons that care about security setuid temporarily before opening a file and then setuid back
[ Parent
| on HN ]
Re:Git security vulnerability announced
by jra_samba on Wednesday April 13, 2022 @06:38PM
(#31021195)
That doesn't always fix it. An attacker can race you to make you write something in a place you didn't intend or expect unless the application is incredibly carefully written.
And by "incredibly" I mean beyond the scope of human endeavour :-).