On 23.06.2017 10:26, Raphael Hertzog wrote: > Hello Felix, > > On Thu, 22 Jun 2017, Felix Geyer wrote: >> I've prepared a backported patch of the relevant changes from 5.5.5 for >> jessie and stretch. > How did you identify the relevant changes from 5.5.5 given that we > don't have any git repository and that we don't have access to the > previous release (5.5.4?) either AFAIK?
You can still download version 5.5.4: http://www.rarlab.com/rar/unrarsrc-5.5.4.tar.gz The 5.5.4 -> 5.5.5 diff contains some changes regarding input validation. Those aren't directly related to this issue and are more difficult to backport so I've skipped them. Felix
