[Secure-testing-team] Bug#776186: busybox: CVE-2014-9645: modprobe wrongly accepts paths as module names

[Salvatore Bonaccorso]

Source: busybox
Version: 1:1.20.0-7
Severity: normal
Tags: security patch upstream fixed-upstream

Hi,

the following vulnerability was published for busybox.

CVE-2014-9645[0]:
modprobe wrongly accepts paths as module names

Upstream report is at [1] with fix at [2].

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2014-9645
[1] https://bugs.busybox.net/show_bug.cgi?id=7652
[2] http://git.busybox.net/busybox/commit/?id=4e314faa0aecb66717418e9a47a4451aec59262b

Regards,
Salvatore