browsing zip archive breaks the archive?

Havoc Pennington hp at redhat.com
Wed Apr 10 21:35:27 UTC 2002


Pavel Roskin <proski at gnu.org> writes:
> Hi, Havoc!
> 
> > Can anyone point me at the patch I need to grab? I don't want to
> > upgrade our RPMs to CVS wholesale at this point in the release cycle.
> 
> cvs diff -D 2002-02-19 -D 2002-02-20 vfs/extfs.c
> 
> Also grab vfs/extfs/uzip from CVS.  This fixes a Perl-style "format string
> vulnerability".
> 

Thanks, I put in both fixes and also removed --with-included-slang

Havoc



More information about the mc-devel mailing list