Path to this page:
Subject: CVS commit: pkgsrc/archivers/lhasa
From: Sergey Svishchev
Date: 2013-05-08 19:40:30
Message id: 20130508174031.40F11175DD@cvs.netbsd.org
Log Message:
Update to 0.1.0. Changes:
Directory paths containing '..' as a directory name are now sanitized,
to prevent malicious archives being able to overwrite arbitrary files on
the filesystem.
Symbolic links are now extracted in a safer way, being created as dummy
files in O_EXCL mode that are overwritten with proper symbolic links at
the end of extraction.
Processing of archives read from IPC pipes (including stdin) has
been fixed.
Files: