Subject: CVS commit: pkgsrc/archivers/lhasa
From: Sergey Svishchev
Date: 2013-05-08 19:40:30
Message id: 20130508174031.40F11175DD@cvs.netbsd.org

Log Message:
Update to 0.1.0. Changes:

Directory paths containing '..' as a directory name are now sanitized,
to prevent malicious archives being able to overwrite arbitrary files on
the filesystem.

Symbolic links are now extracted in a safer way, being created as dummy
files in O_EXCL mode that are overwritten with proper symbolic links at
the end of extraction.

Processing of archives read from IPC pipes (including stdin) has
been fixed.

Files:
RevisionActionfile
1.5modifypkgsrc/archivers/lhasa/Makefile
1.4modifypkgsrc/archivers/lhasa/distinfo