oss-sec mailing list archives

CVE-2015-1416: vulnerability in patch(1)

From: Adam Maris <amaris () redhat com>
Date: Thu, 30 Jul 2015 14:05:48 +0200

Hello,

I'd like to know whether CVE-2015-1416 is BSD-only issue(https://www.freebsd.org/security/advisories/FreeBSD-SA-15:14.bsdpatch.asc)or does it also affect upstream patch(1) utility?

In that case, is it tracked in upstream?

Thank you

--
Adam Maris / Red Hat Product Security

Current thread:

CVE-2015-1416: vulnerability in patch(1) Adam Maris (Jul 30)
- Re: CVE-2015-1416: vulnerability in patch(1) Mark Felder (Aug 01)
  - Re: CVE-2015-1416: vulnerability in patch(1) Florian Weimer (Aug 01)
    - Re: CVE-2015-1416: vulnerability in patch(1) Mark Felder (Aug 01)
    - Re: CVE-2015-1416: vulnerability in patch(1) cve-assign (Aug 02)