Directory traversal in `ar`

Alexander Cherepanov cherepan at mccme.ru
Mon Jan 5 19:16:22 UTC 2015


On 2014-12-30 01:17, Alexander Cherepanov wrote:
> On 2014-12-29 03:00, Mark Wielaard wrote:
>>>> BTW. For patches we require people to follow the guidelines in the
>>>> CONTRIBUTING file (in particular we require a Signed-off-by line):
>>>> https://git.fedorahosted.org/cgit/elfutils.git/tree/CONTRIBUTING
>>>
>>> Sorry, a better patch attached.
>>
>> The patch looks perfect and I agree with your analysis.
>> Pushed as is to master.
>
> Cook, thanks!

Hm, s/Cook/Cool/

> CVE request is here:
> http://www.openwall.com/lists/oss-security/2014/12/29/2

CVE-2014-9486 is assigned here:
http://www.openwall.com/lists/oss-security/2015/01/03/9

-- 
Alexander Cherepanov


More information about the elfutils-devel mailing list