Commit Graph

6 Commits

Author SHA1 Message Date
jasper
f3ba660c88 - stop spreading lies and actually use /var/tmp as temp directory. 2012-10-21 12:59:43 +00:00
sthen
2476a2db73 update to mpack 1.6 plus various patches from Sebastian Pipping:
- SECURITY: don't create world readable files. CVE-2011-4919
- avoid conflicting prototypes
2012-01-08 00:12:12 +00:00
aanriot
b5143bc7b7 backout previous commit, misunderstanding. Unsecure str* calls have to
be fixed before.
2005-10-06 21:09:21 +00:00
aanriot
ac37a54be9 update to 1.6.
ok fgsch@
2005-10-06 20:46:02 +00:00
naddy
78b1720bcc SECURITY fixes, submitted by Nick Nauwelaerts <nick@wanadoo.be>:
* Fix buffer overflow.  (Obtained from Debian)
* Strip leading "../" when creating new files.  (Obtained from Debian)

Clean-up by yours truly:

* Parameter parsing fix.  (Obtained from Debian)
* Prefer native getopt() and MD5 functions over the included ones.
* Make munpack synopsis agree with actual parameters.
* Respect CC.
2002-08-09 01:15:19 +00:00
angelos
445d328fb2 mpack port. 1998-04-29 05:07:09 +00:00