Date: Mon, 7 Mar 2016 22:10:33 +0100 From: Florian Weimer <fweimer@...hat.com> To: oss-security@...ts.openwall.com Subject: CVE-2016-1234 in glibc glob with GLOB_ALTDIRFUNC Alexander Cherepanov discovered that the glob implementation in glibc does not correctly handle overlong names in struct dirent buffers when GLOB_ALTDIRFUNC is used. Upstream bug report: <https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2016-1234> Florian
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.