This is the mail archive of the
elfutils-devel@sourceware.org
mailing list for the elfutils project.
Re: Directory traversal in `ar`
- From: Alexander Cherepanov <cherepan at mccme dot ru>
- To: elfutils-devel at lists dot fedorahosted dot org
- Date: Tue, 30 Dec 2014 01:17:34 +0300
- Subject: Re: Directory traversal in `ar`
On 2014-12-29 03:00, Mark Wielaard wrote:
>>> BTW. For patches we require people to follow the guidelines in the
>>> CONTRIBUTING file (in particular we require a Signed-off-by line):
>>> https://git.fedorahosted.org/cgit/elfutils.git/tree/CONTRIBUTING
>>
>> Sorry, a better patch attached.
>
> The patch looks perfect and I agree with your analysis.
> Pushed as is to master.
Cook, thanks!
CVE request is here:
http://www.openwall.com/lists/oss-security/2014/12/29/2
--
Alexander Cherepanov