|
Message-ID: <20151023134457.GA4731@yuggoth.org> Date: Fri, 23 Oct 2015 13:44:58 +0000 From: Jeremy Stanley <fungi@...goth.org> To: oss-security@...ts.openwall.com Subject: Re: CVE Request: BusyBox tar directory traversal On 2015-10-23 14:24:41 +0200 (+0200), Yves-Alexis Perez <corsac@...ian.org> wrote: > On ven., 2015-10-23 at 03:01 -0400, Robert Watson wrote: > > Remember that tar was created primarily for software distribution > > Actually no, it was created to write archives to (magnetic) tapes. [...] Stop, you're both right! The first tar shipped in V7 UNIX as an improved replacement for the tp utility. Take a guess what archive format AT&T used on the PDP-11 install tapes for V7 (ignoring the self-executing stub they prepended, of course). -- Jeremy Stanley
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.