Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

00437: [3.8] gh-121285: Remove backtracking when parsing tarfile head… #87

Open
wants to merge 1 commit into
base: fedora-3.6
Choose a base branch
from
Open

00437: [3.8] gh-121285: Remove backtracking when parsing tarfile head… #87

wants to merge 1 commit into from

Commits on Sep 5, 2024

  1. 00437: CVE-2024-6232 Remove backtracking when parsing tarfile headers 

    * Remove backtracking when parsing tarfile headers
* Rewrite PAX header parsing to be stricter
* Optimize parsing of GNU extended sparse headers v0.0

(cherry picked from commit 34ddb64)

Co-authored-by: Seth Michael Larson <[email protected]>
Co-authored-by: Kirill Podoprigora <[email protected]>
Co-authored-by: Gregory P. Smith <[email protected]>
Co-authored-by: Lumír Balhar <[email protected]>
    @sethmlarson @Eclips4
    @gpshead @frenzymadness
    4 people committed Sep 5, 2024
    Configuration menu
    Copy the full SHA
    7f22d2a View commit details
    Browse the repository at this point in the history