Roy Li 145abfc06b elfutils: Security Advisory - CVE-2015-0255 ...

Directory traversal vulnerability in the read_long_names function in
libelf/elf_begin.c in elfutils 0.152 and 0.161 allows remote attackers
to write to arbitrary files to the root directory via a / (slash) in a
crafted archive, as demonstrated using the ar program.

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9447

(From OE-Core rev: 4a65944b89a76f18c8ff6e148f17508882d387cf)

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2015-04-30 23:04:17 +01:00

..

elfutils

elfutils: fix an incorrect patch for 0.161

2015-04-15 14:19:45 +01:00

elfutils-0.148

elfutils: fix an incorrect patch for 0.161

2015-04-15 14:19:45 +01:00

elfutils-0.161

elfutils: Security Advisory - CVE-2015-0255

2015-04-30 23:04:17 +01:00

elfutils_0.148.bb

elfutils: enable fix-build-gcc-4.8.patch

2015-04-30 23:04:14 +01:00

elfutils_0.161.bb

elfutils: Security Advisory - CVE-2015-0255

2015-04-30 23:04:17 +01:00