[bug #61424] [libgroff] directory traversal in .fp request

Follow-up Comment #7, bug #61424 (group groff): Bug #64577 subsequently revised this change. Bug #66419 constitutes a fairly strenuous objection to this change being made at all, and it is not clear whether the reporter regards the resolution of bug #64577 as any sort of mitigation. ___

[bug #61424] [libgroff] directory traversal in .fp request

Follow-up Comment #6, bug #61424 (project groff): Weeeird. I, too, can reproduce it -- if I'm far enough below my home directory. With the file bogusfont in ~, a hello-dave.roff in ~/1/2/3/4 (with the appropriate number of instances of "../" in its .fp call) produces EVIL. But in ~/1/2/3 or

[bug #61424] [libgroff] directory traversal in .fp request

Follow-up Comment #5, bug #61424 (project groff): [comment #4 comment #4:] > The bug has been fixed, but in case someone else tries the example and is as puzzled as I was: > > [comment #0 original submission:] > > Output: > > > > > > $ nroff EXPERIMENTS/hello-dave.roff > > EVIL > > > > I coul

[bug #61424] [libgroff] directory traversal in .fp request

Follow-up Comment #4, bug #61424 (project groff): The bug has been fixed, but in case someone else tries the example and is as puzzled as I was: [comment #0 original submission:] > Output: > > > $ nroff EXPERIMENTS/hello-dave.roff > EVIL > I could not for the life of me get this output from g

[bug #61424] [libgroff] directory traversal in .fp request

Update of bug #61424 (project groff): Status: In Progress => Fixed Open/Closed:Open => Closed Planned Release:None => 1.23.0

[bug #61424] [libgroff] directory traversal in .fp request

Update of bug #61424 (project groff): Item Group:None => Incorrect behaviour Status: Need Info => In Progress ___ Follow-up Comment #2: Got feedback from Ing

[bug #61424] [libgroff] directory traversal in .fp request

Update of bug #61424 (project groff): Status: In Progress => Need Info ___ Follow-up Comment #1: Raised for discussion on groff@ .

[bug #61424] [libgroff] directory traversal in .fp request

URL: Summary: [libgroff] directory traversal in .fp request Project: GNU troff Submitted by: gbranden Submitted on: Thu 04 Nov 2021 09:09:12 AM UTC Category: Core Seve