5c5f75046a
It fixes CVE-2015-2060, a directory traversal vulnerability. A CAB file with overlong UTF-8 encodings for "/" can get its files extracted to an absolute path instead of the current directory. [Debian bug #778753] Under Cygwin, a CAB file using both "/" and "\" can evade checks for absolute files and "../" directory traversals and can get its files extracted to any path.
15 lines
372 B
Makefile
15 lines
372 B
Makefile
# $NetBSD: Makefile,v 1.27 2015/03/27 16:49:55 bsiegert Exp $
|
|
|
|
DISTNAME= cabextract-1.6
|
|
CATEGORIES= archivers
|
|
MASTER_SITES= http://www.cabextract.org.uk/
|
|
|
|
MAINTAINER= pkgsrc-users@NetBSD.org
|
|
HOMEPAGE= http://www.cabextract.org.uk/
|
|
COMMENT= Microsoft cabinet (.CAB) file extractor
|
|
LICENSE= gnu-gpl-v3
|
|
|
|
USE_TOOLS+= gmake
|
|
GNU_CONFIGURE= yes
|
|
|
|
.include "../../mk/bsd.pkg.mk"
|