Subversion Repositories

(root)/trunk/debian/patches/series @ 24 - Rev 39

?revision_form?

Rev ?revision_input??revision_submit?

?revision_endform?

Go to most recent revision | Show changed files | Details | Compare with Previous | Blame | RSS feed

Filtering Options

From rev	To rev	Max revs

Search history for

Show All

Rev	Age	Author	Path	Log message	Diff
39	3164d 12h	magnus	/trunk/debian/	testsuite.patch: Add a simple test (Closes: #737258).
38	3694d 11h	magnus	/trunk/debian/	oldgnu_prefix.patch: Detect old-style GNU headers correctly (Closes: #763119). Those appear in incremental archives and use the bytes that the new-style headers use for the prefix field for other fields. Thanks to Steinar H. Gunderson.
33	3933d 08h	magnus	/trunk/debian/	th_get_size-unsigned-int.patch: Make the th_get_size() macro cast the result from oct_to_int() to unsigned int. This is the right fix for bug #725938 on 64-bit systems, where a specially crafted tar file would not cause an integer overflow, but a memory allocation of almost 16 exbibytes, which would certainly fail outright without harm.
24	3933d 10h	magnus	/trunk/debian/	[SECURITY] CVE-2013-4420.patch: Strip out leading slashes and any pathname prefix containing ".." components (Closes: #731860). This is done in th_get_pathname() (as well as to symlink targets when extracting symlinks), not merely when extracting files, which means applications calling that function will not see the stored filename. There is no way to disable this behaviour, but it can be expected that one will be provided when the issue is solved upstream.
23	3935d 10h	magnus	/trunk/debian/	* no_static_buffers.patch: avoid using a static buffer in th_get_pathname(). Taken from upstream. Needed for no_maxpathlen.patch. * maxpathlen.patch: Fix FTBFS on Hurd by dynamically allocating path names (Closes: #657116). Thanks to Svante Signell and Petter Reinholdtsen.