oss-sec mailing list archives
Re: less(1) with LESSOPEN mishandles \n in paths
From: Jakub Wilk <jwilk () jwilk net>
Date: Mon, 15 Apr 2024 09:40:49 +0200
* Jakub Wilk <jwilk () jwilk net>, 2024-04-12 14:20:
less(1) does not correctly escape newlines in pathnames when constructing command line of the input preprocessor.
CVE-2024-32487 was assigned to this bug. -- Jakub Wilk
Current thread:
- less(1) with LESSOPEN mishandles \n in paths Jakub Wilk (Apr 12)
- Re: less(1) with LESSOPEN mishandles \n in paths Sam James (Apr 12)
- Re: less(1) with LESSOPEN mishandles \n in paths Jakub Wilk (Apr 15)
- <Possible follow-ups>
- Re: less(1) with LESSOPEN mishandles \n in paths Tobias Powalowski (Apr 13)