]> code.ossystems Code Review - openembedded-core.git/commit
elfutils: CVE-2014-9447
authorSona Sarmadi <sona.sarmadi@enea.com>
Wed, 29 Apr 2015 09:02:21 +0000 (11:02 +0200)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Fri, 1 May 2015 11:34:06 +0000 (12:34 +0100)
commit6e7badf6819f372bd6dced191c7fda9748062126
treebca03b9e44869db85f875683ad86f34b27d26887
parent0b13fbf3f9b4419141445b381ffa9445af6e52ab
elfutils: CVE-2014-9447

directory traversal in read_long_names()

Reference
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9447

Upstream commit with the analysis:
https://git.fedorahosted.org/cgit/elfutils.git/commit/?id=147018e729e7c22eeabf15b82d26e4bf68a0d18e

Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
Signed-off-by: Maxin B. John <maxin.john@enea.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-devtools/elfutils/elfutils/CVE-2014-9447.patch [new file with mode: 0644]
meta/recipes-devtools/elfutils/elfutils_0.155.bb