]> git.ipfire.org Git - thirdparty/util-linux.git/commit
chsh, chfn: remove readline support [CVE-2022-0563]
authorKarel Zak <kzak@redhat.com>
Thu, 10 Feb 2022 11:03:17 +0000 (12:03 +0100)
committerKarel Zak <kzak@redhat.com>
Mon, 14 Feb 2022 09:32:32 +0000 (10:32 +0100)
commit39a81981ac4b8a1f521db550afc117ccab9548cb
tree5535e20788ab4883d62bc9dd1591ec2faf3446f0
parent86f89da80e381050745ebd574fb8faa3a4016279
chsh, chfn: remove readline support [CVE-2022-0563]

The readline library uses INPUTRC= environment variable to get a path
to the library config file. When the library cannot parse the
specified file, it prints an error message containing data from the
file.

Unfortunately, the library does not use secure_getenv() (or a similar
concept) to avoid vulnerabilities that could occur if set-user-ID or
set-group-ID programs.

Reported-by: Rory Mackie <rory.mackie@trailofbits.com>
Signed-off-by: Karel Zak <kzak@redhat.com>
login-utils/Makemodule.am
login-utils/chfn.c
login-utils/chsh.c