SHA256
1
0
forked from pool/gnome-autoar

Accepting request 885656 from GNOME:Factory

- Update to version 0.3.1:
  + Disallow symlinks in parents completely when extracting
    ( CVE-2021-28650 )
  + Drop recursive delete on failure to prevent data loss
  + Add back RAR support (forwarded request 885189 from susnux)

OBS-URL: https://build.opensuse.org/request/show/885656
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/gnome-autoar?expand=0&rev=7
This commit is contained in:
Dominique Leuenberger 2021-04-18 19:45:02 +00:00 committed by Git OBS Bridge
commit 39ad9b02ee
4 changed files with 13 additions and 4 deletions

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:f2c112c0120cca2bf5a82c5b0ac8cba90ce10d21fec78f50a3bc513fdd64586b
size 297072

View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:0e78713e6f0de339fdee16bab82753ae290fe80fa7b4ba6e3db8c1465b81d0f8
size 297904

View File

@ -1,3 +1,12 @@
-------------------------------------------------------------------
Wed Apr 14 00:40:44 UTC 2021 - Ferdinand Thiessen <rpm@fthiessen.de>
- Update to version 0.3.1:
+ Disallow symlinks in parents completely when extracting
( CVE-2021-28650 )
+ Drop recursive delete on failure to prevent data loss
+ Add back RAR support
-------------------------------------------------------------------
Fri Feb 12 17:19:47 UTC 2021 - Bjørn Lie <bjorn.lie@gmail.com>

View File

@ -17,7 +17,7 @@
Name: gnome-autoar
Version: 0.3.0
Version: 0.3.1
Release: 0
Summary: Automatic archives creating and extracting library
License: LGPL-2.0-or-later