bug#72283: Path traversal in gzip's -S option

2024-07-24 Thread GNU gzip discussion and bug reports.
Hi, I just stumbled upon a "feature" that was probably not intended with the -S parameter: $ cat /tmp/importantfile important content $ gzip -f -k -S .d/../../tmp/importantfile /etc/ld.so.conf $ cat /tmp/importantfile $ I.e., it is possible to create/overwrite files at arbitrary

bug#72283: Path traversal in gzip's -S option

2024-07-24 Thread Paul Eggert
On 2024-07-24 14:59, Alex Stumpf wrote: It's up to you whether you consider this a fix-worthy bug, Thanks for reporting that. It's bad behavior, and worth a fix. I installed the attached and am closing the bug report.From 75f9f29ec64eec61025bd05f65beeece62d3cf84 Mon Sep 17 00:00:00 2001 From: