Roy Li def79f5f31 elfutils: Security Advisory - CVE-2015-0255 ...

Directory traversal vulnerability in the read_long_names function in
libelf/elf_begin.c in elfutils 0.152 and 0.161 allows remote attackers
to write to arbitrary files to the root directory via a / (slash) in a
crafted archive, as demonstrated using the ar program.

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9447

(From OE-Core rev: 4a65944b89a76f18c8ff6e148f17508882d387cf)

(From OE-Core rev: 5eda84a62201461b9c69498ec35585d2c8142dec)

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2015-06-28 09:44:06 +01:00

..

elfutils

elfutils: fix an incorrect patch for 0.161

2015-05-15 18:12:44 +01:00

elfutils-0.148

elfutils: fix an incorrect patch for 0.161

2015-05-15 18:12:44 +01:00

elfutils-0.161

elfutils: Security Advisory - CVE-2015-0255

2015-06-28 09:44:06 +01:00

elfutils_0.148.bb

elfutils: enable fix-build-gcc-4.8.patch

2015-06-28 09:44:05 +01:00

elfutils_0.161.bb

elfutils: Security Advisory - CVE-2015-0255

2015-06-28 09:44:06 +01:00