Commit Graph

4 Commits

Author SHA1 Message Date
sthen
2476a2db73 update to mpack 1.6 plus various patches from Sebastian Pipping:
- SECURITY: don't create world readable files. CVE-2011-4919
- avoid conflicting prototypes
2012-01-08 00:12:12 +00:00
aanriot
b5143bc7b7 backout previous commit, misunderstanding. Unsecure str* calls have to
be fixed before.
2005-10-06 21:09:21 +00:00
aanriot
ac37a54be9 update to 1.6.
ok fgsch@
2005-10-06 20:46:02 +00:00
naddy
78b1720bcc SECURITY fixes, submitted by Nick Nauwelaerts <nick@wanadoo.be>:
* Fix buffer overflow.  (Obtained from Debian)
* Strip leading "../" when creating new files.  (Obtained from Debian)

Clean-up by yours truly:

* Parameter parsing fix.  (Obtained from Debian)
* Prefer native getopt() and MD5 functions over the included ones.
* Make munpack synopsis agree with actual parameters.
* Respect CC.
2002-08-09 01:15:19 +00:00