bug-tar
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Bug-tar] tar-1.13.92 strips leading or contained './'


From: Martin Schlemmer
Subject: [Bug-tar] tar-1.13.92 strips leading or contained './'
Date: Tue, 06 Jan 2004 21:13:38 +0200

Hi

As above.  Having a path start with './' or containing '/./' is not
a security risk, and even used by some archiving apps as security
measure (like unzip that appends './').  This behaviour breaks reacent
tarballs (among those are tcpdump-3.8.1.tar.gz, and most ones in RH
src.rpm's).

Attached is a possible fix.  More info at:

  http://bugs.gentoo.org/show_bug.cgi?id=37132


Thanks,

-- 

Martin Schlemmer


Attachment: tar-1.13.92-fix-pathstrip.patch
Description: Text Data

Attachment: signature.asc
Description: This is a digitally signed message part


reply via email to

[Prev in Thread] Current Thread [Next in Thread]