* [Bug localedata/17142] New: LANGUAGE environment variable processing and directory traversal
@ 2014-07-11 13:15 fweimer at redhat dot com
2015-03-13 15:10 ` [Bug localedata/17142] " jwilk at jwilk dot net
2015-08-27 22:00 ` [Bug locale/17142] " jsm28 at gcc dot gnu.org
0 siblings, 2 replies; 3+ messages in thread
From: fweimer at redhat dot com @ 2014-07-11 13:15 UTC (permalink / raw)
To: libc-locales
https://sourceware.org/bugzilla/show_bug.cgi?id=17142
Bug ID: 17142
Summary: LANGUAGE environment variable processing and directory
traversal
Product: glibc
Version: unspecified
Status: NEW
Severity: normal
Priority: P2
Component: localedata
Assignee: unassigned at sourceware dot org
Reporter: fweimer at redhat dot com
CC: libc-locales at sourceware dot org
Flags: security+
Bug 17137 did not address processing of the LANGUAGE environment variable in
intl/dcigettext.c. ".." path components should be restricted and the usual
alloca hardening applied.
I'm not sure what is the best approach here. intl/ is shared with gettext, so
we probably cannot reuse existing code in locale/ for locating the message
catalogs.
We did not handle this as part of CVE-2014-0475 because the vectors known at
the time did not apply to gettext, and the shared code base complicated
matters.
--
You are receiving this mail because:
You are on the CC list for the bug.
^ permalink raw reply [flat|nested] 3+ messages in thread
* [Bug localedata/17142] LANGUAGE environment variable processing and directory traversal
2014-07-11 13:15 [Bug localedata/17142] New: LANGUAGE environment variable processing and directory traversal fweimer at redhat dot com
@ 2015-03-13 15:10 ` jwilk at jwilk dot net
2015-08-27 22:00 ` [Bug locale/17142] " jsm28 at gcc dot gnu.org
1 sibling, 0 replies; 3+ messages in thread
From: jwilk at jwilk dot net @ 2015-03-13 15:10 UTC (permalink / raw)
To: libc-locales
https://sourceware.org/bugzilla/show_bug.cgi?id=17142
Jakub Wilk <jwilk at jwilk dot net> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |jwilk at jwilk dot net
--
You are receiving this mail because:
You are on the CC list for the bug.
^ permalink raw reply [flat|nested] 3+ messages in thread
* [Bug locale/17142] LANGUAGE environment variable processing and directory traversal
2014-07-11 13:15 [Bug localedata/17142] New: LANGUAGE environment variable processing and directory traversal fweimer at redhat dot com
2015-03-13 15:10 ` [Bug localedata/17142] " jwilk at jwilk dot net
@ 2015-08-27 22:00 ` jsm28 at gcc dot gnu.org
1 sibling, 0 replies; 3+ messages in thread
From: jsm28 at gcc dot gnu.org @ 2015-08-27 22:00 UTC (permalink / raw)
To: libc-locales
https://sourceware.org/bugzilla/show_bug.cgi?id=17142
Joseph Myers <jsm28 at gcc dot gnu.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Component|localedata |locale
--
You are receiving this mail because:
You are on the CC list for the bug.
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2015-08-27 22:00 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2014-07-11 13:15 [Bug localedata/17142] New: LANGUAGE environment variable processing and directory traversal fweimer at redhat dot com
2015-03-13 15:10 ` [Bug localedata/17142] " jwilk at jwilk dot net
2015-08-27 22:00 ` [Bug locale/17142] " jsm28 at gcc dot gnu.org
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).