[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <20150104190637.GA17075@eldamar.local>
Date: Sun, 4 Jan 2015 20:06:37 +0100
From: Salvatore Bonaccorso <carnil@...ian.org>
To: OSS Security Mailinglist <oss-security@...ts.openwall.com>
Cc: CVE Assignments MITRE <cve-assign@...re.org>
Subject: CVE Request: gcab: directory traversal
Hi
Jakub Wilk reported a directory traversal vulnerability due to cab not
filtering leading slashes from paths in CAB files.
Debian bug: https://bugs.debian.org/774580
Upstream bugreport: https://bugzilla.gnome.org/show_bug.cgi?id=742331
Could you assign as CVE for this issue?
Regards,
Salvatore
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
