7185 – patch: directory traversal flaw CVE-2015-1196

Bug 7185 - patch: directory traversal flaw CVE-2015-1196

Summary: patch: directory traversal flaw CVE-2015-1196

Status:	RESOLVED FIXED

Alias:	None

Product:	OE-Core
Classification:	Build System, Metadata & Runtime
Component:	devtools / tool chain (show other bugs)
Version:	unspecified
Hardware:	All Multiple

Importance:	Medium normal
Target Milestone:	1.8 M4
Assignee:	Robert Yang
QA Contact:

URL:
Whiteboard:

Depends on:
Blocks:

Reported:	2015-01-19 12:47 UTC by Sona Sarmadi
Modified:	2015-04-01 01:35 UTC (History)
CC List:	3 users (show)

See Also:
OS type for building Yocto:	---
Type of Regression:	---
Verified:
Documentation change:	No (bug/feature does not impact docs)

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Sona Sarmadi 2015-01-19 12:47:50 UTC

A directory traversal flaw was reported in patch:

References:
http://www.openwall.com/lists/oss-security/2015/01/18/6
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775227
https://bugzilla.redhat.com/show_bug.cgi?id=1182154

Comment 1 Robert Yang 2015-04-01 01:35:27 UTC

http://git.yoctoproject.org/cgit/cgit.cgi/poky/commit/?id=c35aba339aa3ecc0c7b15c8423e81a9c9bca037b