This is the mail archive of the elfutils-devel@sourceware.org mailing list for the elfutils project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

Re: Directory traversal in `ar`


On 2014-12-29 03:00, Mark Wielaard wrote:
>>> BTW. For patches we require people to follow the guidelines in the
>>> CONTRIBUTING file (in particular we require a Signed-off-by line):
>>> https://git.fedorahosted.org/cgit/elfutils.git/tree/CONTRIBUTING
>>
>> Sorry, a better patch attached.
>
> The patch looks perfect and I agree with your analysis.
> Pushed as is to master.

Cook, thanks!

CVE request is here:
http://www.openwall.com/lists/oss-security/2014/12/29/2

-- 
Alexander Cherepanov

Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]