Changelog for
cpio-2.5-10tr.i586.rpm :
Tue Jun 21 14:00:00 2005 Syed Shabir Zakiullah
2.5-10tr
- Fix File Permissions Vulnerability, Race condition in cpio 2.6 and earlier
allows local users to modify permissions of arbitrary files via a hard link
attack on a file while it is being decompressed, whose permissions are changed
by cpio after the decompression is complete.
The Common Vulnerabilities and Exposures project (cve.mitre.org)
has assigned the name CAN-2005-1111 to this issue.
- Fix Directory Traversal Vulnerability, cpio 2.6 and earlier allows remote
attackers to write to arbitrary directories via a .. (dot dot) in a cpio file.
The Common Vulnerabilities and Exposures project (cve.mitre.org)
has assigned the name CAN-2005-1229 to this issue.
Fri Feb 4 13:00:00 2005 Oystein Viggen 2.5-9tr
- CAN-1999-1572, -O uses umask 0
Fri Dec 12 13:00:00 2003 Erlend Midttun 2.5-6tr
- Big rebuild
Mon Jun 23 14:00:00 2003 Erlend Midttun 2.5-5tr
- Now with %defattr.
Wed Jun 18 14:00:00 2003 Erlend Midttun 2.5-4tr
- Big rebuild
Mon Mar 24 13:00:00 2003 Erlend Midttun 2.5-3em
- Rebuilt against glibc 2.3.2.
Thu Aug 29 14:00:00 2002 Christian H. Toldnes 2.5-2ct
- Patched away info stuff: (Patch 7)
Mon Jul 22 14:00:00 2002 Christian H. Toldnes 2.5-1ct
- Update to 2.5
- Removed info stuff.
Fri Jan 21 13:00:00 2000 Tore Olsen
- Moved man and info pages to /usr/share adhering to FHS
Tue Aug 31 14:00:00 1999 Jeff Johnson
- fix infinite loop unpacking empty files with hard links (#4208).
- stdout chould contain progress information (#3358).
Sun Mar 21 13:00:00 1999 Crstian Gafton
- auto rebuild in the new build environment (release 12)
Sat Dec 5 13:00:00 1998 Jeff Johnson
- longlong dev wrong with \"-o -H odc\" headers (formerly \"-oc\").
Thu Dec 3 13:00:00 1998 Cristian Gafton
- patch to compile on glibc 2.1, where strdup is a macro
Tue Jul 14 14:00:00 1998 Jeff Johnson
- Fiddle bindir/libexecdir to get RH install correct.
- Don\'t include /sbin/rmt -- use the rmt from dump package.
- Don\'t include /bin/mt -- use the mt from mt-st package.
- Add prereq\'s
Tue Jun 30 14:00:00 1998 Jeff Johnson
- fix \'-c\' to duplicate svr4 behavior (problem #438)
- install support programs & info pages
Mon Apr 27 14:00:00 1998 Prospector System
- translations modified for de, fr, tr
Fri Oct 17 14:00:00 1997 Donnie Barnes
- added BuildRoot
- removed \"(used by RPM)\" comment in Summary
Thu Jun 19 14:00:00 1997 Erik Troan
- built against glibc
- no longer statically linked as RPM doesn\'t use cpio for unpacking packages