Re: sharutils: Directory traversal (security issue) in uudecode

Hanno Böck <[email protected]> Sun, 27 Nov 2022 18:50:04 +0100
Newsgroups gmane.comp.gnu.utils.bugs
Message-ID <20221127185004.77ac2e34@computer>
On Sun, 27 Nov 2022 09:45:39 -0800
Paul Eggert <[email protected]> wrote:

> I can't easily investigate this issue with bleeding-edge sharutils on=20
> Fedora 37 (the current Fedora version). Bootstrapping fails because=20
> sharutils assumes old versions of Gnulib etc. and does not work with=20
> current versions. Some diagnostics can be ignored (e.g., for egrep
> and fgrep) but some are a bigger deal. Log attached.

https://sources.debian.org/patches/sharutils/1:4.15.2-5/
Patch 2+3 should let it build on a modern system.

--=20
Hanno B=C3=B6ck
https://hboeck.de/