From 4e8f95a0df7c2300b830ec12c0ae1e161bc8a8a3 Mon Sep 17 00:00:00 2001
From: Florian Weimer <fweimer@redhat.com>
Date: Mon, 12 May 2014 15:24:12 +0200
Subject: _nl_find_locale: Improve handling of crafted locale names [BZ #17137]

Prevent directory traversal in locale-related environment variables
(CVE-2014-0475).
---
 localedata/ChangeLog | 6 ++++++
 1 file changed, 6 insertions(+)

(limited to 'localedata/ChangeLog')

diff --git a/localedata/ChangeLog b/localedata/ChangeLog
index 9dd3cf2c23..c22d27915e 100644
--- a/localedata/ChangeLog
+++ b/localedata/ChangeLog
@@ -1,3 +1,9 @@
+2014-07-02  Florian Weimer  <fweimer@redhat.com>
+
+	* tst-setlocale3.c: New file.
+	* Makefile (tests): Add tst-setlocale3.
+	(tst-setlocale3-ENV): New variable.
+
 2014-06-20  Stefan Liebler  <stli@linux.vnet.ibm.com>
 
 	* Makefile (LOCALES): Add en_GB.UTF-8.
-- 
cgit v1.2.3