| Age | Commit message (Collapse) | Author | Files | |
|---|---|---|---|---|
| 2015-07-01 | elfutils: 0.161 -> 0.162 | Robert Yang | 1 | |
| * Remove backport patch 0001-libelf-Fix-dir-traversal-vuln-in-ar-extraction.patch. * Update: - arm_func_value.patch - fixheadercheck.patch - redhat-portability.diff Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> | ||||
| 2015-04-30 | elfutils: Security Advisory - CVE-2015-0255 | Roy Li | 1 | |
| Directory traversal vulnerability in the read_long_names function in libelf/elf_begin.c in elfutils 0.152 and 0.161 allows remote attackers to write to arbitrary files to the root directory via a / (slash) in a crafted archive, as demonstrated using the ar program. https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9447 Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> | ||||
 |
index : openembedded-core.git | |
| Mirror of openembedded-core | Multi-Tech Systems |
| summaryrefslogtreecommitdiff |
path: root/meta/recipes-devtools/elfutils/elfutils-0.161/0001-libelf-Fix-dir-traversal-vuln-in-ar-extraction.patch