syslinux: security issues in installer [LWN.net]

Package(s):

syslinux

CVE #(s):

Created:

February 18, 2003

Updated:

February 19, 2003

Description:

From the syslinux changelog:

"Security flaws have been found in the SYSLINUX installer when running setuid root. Rewrite the SYSLINUX installer so it uses mtools instead. It therefore now requires mtools (specifically mcopy and mattrib) to exist on your system, but it will not require root privileges and SHOULD NOT be setuid."

Alerts:

Gentoo

200302-06

2003-02-17

(Log in to post comments)