Re: Bug#439335: CVE-2007-4131: GNU tar Directory Traversal

previously ...

Nico Golde <nion@debian.org> [Sun, 9 Sep 2007 14:30:06 +0200]:
> Hi,
> * Sylvain Beucler <beuc@gnu.org> [2007-09-09 13:56]:
> > Was this forwarded to the Stable security team?
> >
> > If I'm given a tarball that can replace /etc/passwd, I'd say this is
> > grave bug.
>
> This bug is monitored via the security tracker:
> http://security-tracker.debian.net/tracker/CVE-2007-4131
> So they should be aware of it.

just noticed this going past in an osx update and had a "what ever happenned to that?" moment.

Regards,
Paddy

-- 
To UNSUBSCRIBE, email to debian-security-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org