4 ms·
Interesting that they didn't fix it. I emailed the Tar maintainers privately because I thought they might consider it a security vulnerability, however mild. T
by Wicher 3y ago
Interesting that they didn't fix it.
I emailed the Tar maintainers privately because I thought they might consider it a security vulnerability, however mild. They fixed it promptly but didn't want to make a CVE fuss out of it.
- dgl 3y agoActually, I got it wrong, too many vulnerabilities in flight. They did fix it: https://github.com/openbsd/src/commit/375ccafb2eb77de6cf240e33e9e28d4d2a85b8c1 https://github.com/openbsd/src/commit/375ccafb2eb77de6cf240e...