sm-grimoire-bugs AT lists.ibiblio.org
Subject: SourceMage Grimoire Bug List
List archive
[SM-Grimoire-Bugs] [Bug 13957] tar (star) needs a security update
- From: bugzilla-daemon AT bugs.sourcemage.org
- To: sm-grimoire-bugs AT lists.ibiblio.org
- Subject: [SM-Grimoire-Bugs] [Bug 13957] tar (star) needs a security update
- Date: 28 Aug 2007 10:48:03 -0000
http://bugs.sourcemage.org/show_bug.cgi?id=13957
m.spitzbarth AT gmx.de changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution| |FIXED
Version|test grimoire |stable grimoire
Flag| |integrate, to, stable,
| |grimoire?, fixed, in,
| |lesser, branch+
------- Additional Comments From m.spitzbarth AT gmx.de 2007-08-28 05:48 -------
Although I have still not been able to reproduce the vulnerability in tar, I
have found an upstream patch for it:
http://cvs.savannah.gnu.org/viewvc/tar/src/names.c?root=tar&view=log (look for
revision 1.64)
The corresponding redhat bug for tar is
https://bugzilla.redhat.com/show_bug.cgi?id=253856
I have applied the patch to tar in commit
b0c134185f284495b31e6bb7abef6860849c0dc7
Now that my confusion about a missing vulnerability in tar is solved, I
request
integration to stable for both the tar and star spell (commit
c2bde5d40b7c3920d723ea21807470eac9aa249f).
--
Configure bugmail: http://bugs.sourcemage.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
-
[SM-Grimoire-Bugs] [Bug 13957] tar (star) needs a security update,
bugzilla-daemon, 08/28/2007
- <Possible follow-up(s)>
- [SM-Grimoire-Bugs] [Bug 13957] tar (star) needs a security update, bugzilla-daemon, 08/28/2007
- [SM-Grimoire-Bugs] [Bug 13957] tar (star) needs a security update, bugzilla-daemon, 08/28/2007
Archive powered by MHonArc 2.6.24.