Bug#874059: unrar-free: CVE-2017-14120: directory traversal vulnerability

2017-09-07 Thread Chris Lamb
Chris Lamb wrote: > Updated patch attached; I forgot to add shunit2 to the autopkgtest > dependencies. Good grief, I attached the wrong file so it didn't actually include the shunit2 dependency. I promise that the one attached includes it, however. I notice that this has now been uploaded. PaulL

Bug#874059: unrar-free: CVE-2017-14120: directory traversal vulnerability

2017-09-06 Thread Chris Lamb
Hi, Updated patch attached; I forgot to add shunit2 to the autopkgtest dependencies. Apologies for the noise. Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `- diff --git a/debian/tests/0001-smoketest b/debian/tests/0001-smokete

Bug#874059: unrar-free: CVE-2017-14120: directory traversal vulnerability

2017-09-06 Thread Chris Lamb
tags 874059 + patch thanks Patch attached. It includes autopkgtests checking this CVE and a smoketest of a regular (ie. non-exploit) extraction to prevent a regression. Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `- diff --g