diff options
author | shattered <shattered@pkgsrc.org> | 2013-05-08 17:40:30 +0000 |
---|---|---|
committer | shattered <shattered@pkgsrc.org> | 2013-05-08 17:40:30 +0000 |
commit | 2c8317380121983cb89d5a043858a45bee173dc0 (patch) | |
tree | 73bb635f70c4a0a67dd6cb985f7f13c322957494 /archivers/lhasa | |
parent | 20a780064e6221ad1abeb1831aea09c2904a8453 (diff) | |
download | pkgsrc-2c8317380121983cb89d5a043858a45bee173dc0.tar.gz |
Update to 0.1.0. Changes:
Directory paths containing '..' as a directory name are now sanitized,
to prevent malicious archives being able to overwrite arbitrary files on
the filesystem.
Symbolic links are now extracted in a safer way, being created as dummy
files in O_EXCL mode that are overwritten with proper symbolic links at
the end of extraction.
Processing of archives read from IPC pipes (including stdin) has
been fixed.
Diffstat (limited to 'archivers/lhasa')
-rw-r--r-- | archivers/lhasa/Makefile | 6 | ||||
-rw-r--r-- | archivers/lhasa/distinfo | 8 |
2 files changed, 7 insertions, 7 deletions
diff --git a/archivers/lhasa/Makefile b/archivers/lhasa/Makefile index 8ddd504768c..cfe9ce4667c 100644 --- a/archivers/lhasa/Makefile +++ b/archivers/lhasa/Makefile @@ -1,9 +1,9 @@ -# $NetBSD: Makefile,v 1.4 2012/09/11 19:46:56 asau Exp $ +# $NetBSD: Makefile,v 1.5 2013/05/08 17:40:30 shattered Exp $ # -DISTNAME= lhasa-0.0.7 +DISTNAME= lhasa-0.1.0 CATEGORIES= archivers -MASTER_SITES= http://cloud.github.com/downloads/fragglet/lhasa/ +MASTER_SITES= http://www.soulsphere.org/projects/lhasa/ MAINTAINER= pkgsrc-users@NetBSD.org HOMEPAGE= http://fragglet.github.com/lhasa/ diff --git a/archivers/lhasa/distinfo b/archivers/lhasa/distinfo index 04a242a8fde..00ee1299ac4 100644 --- a/archivers/lhasa/distinfo +++ b/archivers/lhasa/distinfo @@ -1,5 +1,5 @@ -$NetBSD: distinfo,v 1.3 2012/06/03 10:20:04 wiz Exp $ +$NetBSD: distinfo,v 1.4 2013/05/08 17:40:30 shattered Exp $ -SHA1 (lhasa-0.0.7.tar.gz) = 40890150483c2075a6cd108fee5bbe23a96d5d71 -RMD160 (lhasa-0.0.7.tar.gz) = 4f0217e88d3fda0528242ed70657326b91b62826 -Size (lhasa-0.0.7.tar.gz) = 2646160 bytes +SHA1 (lhasa-0.1.0.tar.gz) = c1714dd534004a80044b4fbdbe3d41a5fe1548fc +RMD160 (lhasa-0.1.0.tar.gz) = 49dfc45792e78fde80791e84845a66652960ae31 +Size (lhasa-0.1.0.tar.gz) = 2694901 bytes |