[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Regression in handling of CVE-2015-1197 & --no-absolute-filenames br
|
From: |
Chris Lamb |
|
Subject: |
Re: Regression in handling of CVE-2015-1197 & --no-absolute-filenames breaks symlinks starting with / |
|
Date: |
Mon, 20 Jan 2020 13:32:48 +0000 |
|
User-agent: |
Cyrus-JMAP/3.1.7-754-g09d1619-fmstable-20200113v1 |
Hi Mike,
> > The following bug was filed in Debian:
> >
> > https://bugs.debian.org/946267
> >
> > … which reports a recent regression in cpio whereby --no-absolute-
> > filenames breaks the extraction of symlinks starting with /.
>
> I reported a similar issue in November, and I don't think it has been fixed
> yet.
>
> https://lists.gnu.org/archive/html/bug-cpio/2019-11/msg00013.html
Thanks for the reference; let's hope this is addressed soon. :)
Best wishes,
--
,''`.
: :' : Chris Lamb
`. `'` address@hidden 🍥 chris-lamb.co.uk
`-