Directory traversal in `ar`

Alexander Cherepanov cherepan at mccme.ru
Mon Dec 29 22:17:34 UTC 2014


On 2014-12-29 03:00, Mark Wielaard wrote:
>>> BTW. For patches we require people to follow the guidelines in the
>>> CONTRIBUTING file (in particular we require a Signed-off-by line):
>>> https://git.fedorahosted.org/cgit/elfutils.git/tree/CONTRIBUTING
>>
>> Sorry, a better patch attached.
>
> The patch looks perfect and I agree with your analysis.
> Pushed as is to master.

Cook, thanks!

CVE request is here:
http://www.openwall.com/lists/oss-security/2014/12/29/2

-- 
Alexander Cherepanov


More information about the elfutils-devel mailing list