BusyBox dpkg applet: OS command injection

<p>Posted by Solar Designer on Aug 23</p>Hi,<br /> <br /> Anmol Bakshi brought the below with original Subject line saying<br /> &quot;BusyBox dpkg applet: OS command injection -&gt; root RCE (CWE-78)&quot; to<br /> linux-distros on July 13. We quickly determined that no privilege<br /> boundary is crossed, so the coordinated disclosure request was<br /> withdrawn. However, we cannot just withdr