Just read:

https://www.theregister.co.uk/2018/09/15/alpine_linux_bug/

..."The vulnerability lies in the way apk unpacks archives and deals with
suspicious code. Justicz found that if the malware could be hidden within
the package's commit_hooks directory, it would escape the cleanup and
could then be executed as normal."

Didn't found nothing here:

https://bugs.alpinelinux.org/projects/alpine/issues

Am I missing something?

cheers.

-- 
Fabio Martins
PHOSPHORUS NETWORKS
https://phosphorusnetworks.com/en/



---
Unsubscribe:  alpine-user+unsubscribe@lists.alpinelinux.org
Help:         alpine-user+help@lists.alpinelinux.org
---