GNU cpio - Patches: patch #4005, cpio-2.6: fix directory traversal...
You are not allowed to post comments on this tracker with your current authentication level.
patch #4005: cpio-2.6: fix directory traversal issues in copy-in and copy-pass modes
Submitter: | Dmitry V. Levin <ldv> | ||
Submitted: | Wed 11 May 2005 11:16:34 PM UTC | ||
Category: | None | Priority: | 7 - High |
Status: | Done | Privacy: | Public |
Assigned to: | None | Open/Closed: | Closed |
Thu 12 May 2005 05:23:19 PM UTC, comment #3: |
Sergey Poznyakoff <gray> |
Thu 12 May 2005 12:26:53 AM UTC, comment #2: However it applies without cpio-2.6-alt-error-details.patch, too. |
Dmitry V. Levin <ldv> |
Thu 12 May 2005 12:23:33 AM UTC, comment #1: Forgot to mention that attached patch is written for cpio-2.6 with |
Dmitry V. Levin <ldv> |
Wed 11 May 2005 11:16:34 PM UTC, original submission:
By default, cpio creates absolute pathnames in copy-in and copy-pass modes which is insecure. |
Dmitry V. Levin <ldv> |
Depends on the following items: None found
Items that depend on this one: None found
There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.
Follow 4 latest changes.
Date | Changed by | Updated Field | Previous Value | => | Replaced by |
---|---|---|---|---|---|
2005-05-21 | gray | Status | Postponed | Done | |
Open/Closed | Open | Closed | |||
2005-05-12 | gray | Status | None | Postponed | |
2005-05-11 | ldv | Attached File | - | Added cpio-2.6-alt-safer_name_suffix.patch, #4593 |
Powered by Savane 3.13-4448.
Corresponding source code
That's great. However, it will change the default behavior of cpio, which means that many existing scripts will stop working.