[cmake-developers] Security Report for CMake

Cyril VALLICARI c.vallicari at gmail.com
Tue Jul 19 19:41:14 EDT 2016


Ok cool, no reward i guess :-/

just please add my nickname Ug_0 Security and remove the mail adress of
public pages (it's ok for the mailing list i guess)

Also do you plan to request a CVE for this as CMake is very like very used
(i mean how many installer are affected in the wild ?)

Thank you

2016-07-19 23:47 GMT+02:00 Cyril VALLICARI <c.vallicari at gmail.com>:

> Ok cool, no reward i guess :-/
> just please add my nick name Ug_0 Security and remove the
>  mail adress thank you
>
> 2016-07-19 22:29 GMT+02:00 Brad King <brad.king at kitware.com>:
>
>> On 07/19/2016 01:46 PM, Cyril VALLICARI wrote:
>> > Here a Patch that correct the vulnerability
>>
>> Thanks, applied:
>>
>>  NSIS: Quote uninstaller path when executing it in a shell
>>  https://cmake.org/gitweb?p=cmake.git;a=commitdiff;h=01e1f694
>>
>> -Brad
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://public.kitware.com/pipermail/cmake-developers/attachments/20160720/9aa524d1/attachment.html>


More information about the cmake-developers mailing list