|
|
Message-ID: <e5b223fc-dd55-9707-46ea-0ccaa56531bf@mirbsd.de> Date: Fri, 6 Nov 2026 04:36:14 +0100 (CET) From: Thorsten Glaser <tg@...bsd.de> To: musl@...ts.openwall.com Subject: Re: Advisory for OpenSSH+musl users On Fri, 6 Nov 2026, Loganaden Velvindron wrote: >Do you have the list of software which were breaking and which caused >this change in musl in the first place (commit:b3c4cc121f70f) ? No full list, but, the reverse change in GNU glibc/libxcrypt (begin to return NULL) broke at least: • GNU CVS • shadow-tools • cyrus-sasl2 (CVE-2013-4122) • xlock While POSIX made allowance for returning NULL, this does not match historic pre-existing behaviour on many systems, which at that point would have been the observed and possibly documented one. bye, //mirabilos -- https://toot.mirbsd.org/@mirabilos/statuses/01KNQD9RNZM1Z2A61AZHG857MP ↑ long list of references on why “AI”/LLMs are bad for everyone also: ↓ from https://toot.cat/@dthompson/117180306961006760 > "responsible LLM usage" is the "clean coal" of the tech world
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.