Skip to Content.
Sympa Menu

sm-grimoire-bugs - [SM-Grimoire-Bugs] [Bug 13957] tar (star) needs a security update

sm-grimoire-bugs AT lists.ibiblio.org

Subject: SourceMage Grimoire Bug List

List archive

Chronological Thread  
  • From: bugzilla-daemon AT bugs.sourcemage.org
  • To: sm-grimoire-bugs AT lists.ibiblio.org
  • Subject: [SM-Grimoire-Bugs] [Bug 13957] tar (star) needs a security update
  • Date: 28 Aug 2007 10:48:03 -0000

http://bugs.sourcemage.org/show_bug.cgi?id=13957


m.spitzbarth AT gmx.de changed:

What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution| |FIXED
Version|test grimoire |stable grimoire
Flag| |integrate, to, stable,
| |grimoire?, fixed, in,
| |lesser, branch+




------- Additional Comments From m.spitzbarth AT gmx.de 2007-08-28 05:48 -------
Although I have still not been able to reproduce the vulnerability in tar, I
have found an upstream patch for it:
http://cvs.savannah.gnu.org/viewvc/tar/src/names.c?root=tar&view=log (look for
revision 1.64)

The corresponding redhat bug for tar is
https://bugzilla.redhat.com/show_bug.cgi?id=253856

I have applied the patch to tar in commit
b0c134185f284495b31e6bb7abef6860849c0dc7

Now that my confusion about a missing vulnerability in tar is solved, I
request
integration to stable for both the tar and star spell (commit
c2bde5d40b7c3920d723ea21807470eac9aa249f).

--
Configure bugmail: http://bugs.sourcemage.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.




Archive powered by MHonArc 2.6.24.

Top of Page