archive-path-traversalΒΆ
The
cmake(1)-E tarcommand-line tool, and thefile(ARCHIVE_EXTRACT)command, now reject archive entries whose paths are absolute or contain..path traversal components.
The cmake(1) -E tar command-line tool,
and the file(ARCHIVE_EXTRACT) command, now reject archive
entries whose paths are absolute or contain .. path traversal
components.