On Mon, Nov 20, 2017 at 10:14 PM, Aurelien Jarno <aurel...@aurel32.net> wrote: > On 2017-11-20 20:51, Debian Bug Tracking System wrote: >> Processing commands for cont...@bugs.debian.org: >> >> > # match possible intention of reporter >> > reassign 882223 glibc-doc >> Bug #882223 [manpages-dev] Document security problems with system.3 and >> popen.3 (argument injection) >> Bug reassigned from package 'manpages-dev' to 'glibc-doc'. >> No longer marked as found in versions manpages/4.13-3. >> Ignoring request to alter fixed versions of bug #882223 to the same values >> previously set >> > thanks >> Stopping processing here. > > Can you please point us to what has to be fixed on the glibc-doc side? > The system.3 and popen.3 manpages are part of manpages-dev, not > glibc-doc.
Online copy here: https://www.gnu.org/software/libc/manual/html_node/Pipe-to-a-Subprocess.html#Pipe-to-a-Subprocess https://www.gnu.org/software/libc/manual/html_node/Running-a-Command.html#index-system Does not mention security problems... https://www.gnu.org/software/libc/manual/html_node/Line-Input.html#index-gets for instance mention security problem > -- > Aurelien Jarno GPG: 4096R/1DDD8C9B > aurel...@aurel32.net http://www.aurel32.net