[obs-commits] [openSUSE/osc] a79c54: fix security issue (bsc#1122675) no / in filename
Branch: refs/heads/master Home: https://github.com/openSUSE/osc Commit: a79c54418baf9b9785123bd07f350f12bd729ed3 https://github.com/openSUSE/osc/commit/a79c54418baf9b9785123bd07f350f12bd729... Author: lethliel <mstrigl@suse.de> Date: 2020-05-27 (Wed, 27 May 2020) Changed paths: M osc/fetch.py Log Message: ----------- fix security issue (bsc#1122675) no / in filename This checks if the filename of a downloaded file has been modified (for example by a MITM attack) to contain slashes. This could mean that the file is compromised and that the attacker tries to overwrite system files. Commit: fdcd6061228db990251573c906b109f387ea71f1 https://github.com/openSUSE/osc/commit/fdcd6061228db990251573c906b109f387ea7... Author: Marco Strigl <lethliel@gmx.de> Date: 2020-05-27 (Wed, 27 May 2020) Changed paths: M osc/fetch.py Log Message: ----------- Merge pull request #797 from lethliel/fix_1122675 fix security issue (bsc#1122675) no / in filename Compare: https://github.com/openSUSE/osc/compare/3967133022af...fdcd6061228d
participants (1)
-
Marco Strigl