Commit Graph

2 Commits

Author SHA1 Message Date
sthen
2476a2db73 update to mpack 1.6 plus various patches from Sebastian Pipping:
- SECURITY: don't create world readable files. CVE-2011-4919
- avoid conflicting prototypes
2012-01-08 00:12:12 +00:00
naddy
78b1720bcc SECURITY fixes, submitted by Nick Nauwelaerts <nick@wanadoo.be>:
* Fix buffer overflow.  (Obtained from Debian)
* Strip leading "../" when creating new files.  (Obtained from Debian)

Clean-up by yours truly:

* Parameter parsing fix.  (Obtained from Debian)
* Prefer native getopt() and MD5 functions over the included ones.
* Make munpack synopsis agree with actual parameters.
* Respect CC.
2002-08-09 01:15:19 +00:00