On 03/12/2015 02:04 AM, Bruno Haible wrote: > But these arguments don't consider the LANGUAGE variable. The original > intent of LANGUAGE was that it contains colon-separated language or locale > identifiers. But in fact, you can specify relative files names that start > with "../", and thus you can make the _nl_load_domain function in glibc > access files anywhere in the file system.
Yes, this is bug 17142. -- Florian Weimer / Red Hat Product Security
