Skip to content
Commit 337cd5cc authored by Lancelot SIX's avatar Lancelot SIX Committed by Bjørn Forsman
Browse files

vmTools.fillDiskWithRPMs: fix cpio use

When updating to cpio-2.13 in fe758f5f,
a patch from SUSE was dropped. This patch was intended to resolve
CVE-2015-1197, and introduced the '--extract-over-symlink' option to
disable its own effects.

The CVE-2015-1197 was fixed in cpio-2.13 release[1] by other means,
making this patch useless.

Given that this patch is no longer used, we do not need to disable its
effects anymore with the `--extract-over-symlink` argument switch.

This Commit fixes #74984

[1] https://lists.gnu.org/archive/html/info-gnu/2019-11/msg00002.html
parent eeda68a8
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment