Re: nasty patches in pkgsrc regarding CVE-2010-4651: relative paths with ../

To: "Dr. Thomas Orgis" <thomas.orgis%uni-hamburg.de@localhost>, tech-pkg%NetBSD.org@localhost
Subject: Re: nasty patches in pkgsrc regarding CVE-2010-4651: relative paths with ../
From: Jörg Sonnenberger <joerg%bec.de@localhost>
Date: Sat, 4 Jul 2026 10:19:23 +0200

On 7/3/26 12:31 PM, Dr. Thomas Orgis wrote:

Thoughts? As it seems to me, anyone could claim that the BSD patch is
vulnerable to CVE-2010-4651, if I'm not missing something here.
Apologies in that case;-)

Just because someone decides something is a problem doesn't mean othershave to agree. I'd argue that in the world of curlsh, relative pathswith .. components are the least of our problems.


Joerg

References:
- nasty patches in pkgsrc regarding CVE-2010-4651: relative paths with ../
  - From: Dr. Thomas Orgis

Prev by Date: Re: nasty patches in pkgsrc regarding CVE-2010-4651: relative paths with ../
Next by Date: Re: request review: blogc
Previous by Thread: Re: nasty patches in pkgsrc regarding CVE-2010-4651: relative paths with ../
Indexes:

Home | Main Index | Thread Index | Old Index