https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207396
Robert Clausecker changed:
What|Removed |Added
Resolution|--- |FIXED
Status|New
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207396
--- Comment #3 from Ed Maste ---
Oh, I see it was addressed in 3.5.0 and has been merged to stable/11 and
stable/12 (but is not in 11.4 or 12.2).
--
You are receiving this mail because:
You are the assignee for the bug.
__
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207396
--- Comment #2 from Ed Maste ---
Not reproducible for me on 13.0-RC1:
$ tar xvf remove.tar
x f1: Skipping hardlink pointing to itself: f1
tar: Error exit delayed from previous errors.
--
You are receiving this mail because:
You are the
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207396
--- Comment #1 from Robert Clausecker ---
This has been reported as issue #661 to the libarchive project.
https://github.com/libarchive/libarchive/issues/661
--
You are receiving this mail because:
You are the assignee for the bug.
_
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207396
Bug ID: 207396
Summary: Crafted tar archive can be used to remove arbitrary
files
Product: Base System
Version: 10.2-RELEASE
Hardware: Any
OS: Any
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207396
Robert Clausecker changed:
What|Removed |Added
Severity|Affects Only Me |Affects Some People
--
You ar