Bug 820608 – app-misc/binwalk-2.3.3: stabilization

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Georgy Yakovlev 2021-10-28 16:19:48 UTC]

version 2.3.3 fixed a security issue 



Prior to Binwalk v2.3.3, extracted archives could create symlinks which point anywhere on the file system, potentially resulting in a directory traversal attack if subsequent extraction utilties blindly follow these symlinks. More generically, Binwalk makes use of many third-party extraction utilties which may have unpatched security issues; Binwalk v2.3.3 and later allows external extraction tools to be run as an unprivileged user using the `run-as` command line option (this requires Binwalk itself to be run with root privileges). Additionally, Binwalk v2.3.3 and later will refuse to perform extraction as root unless `--run-as=root` is specified.



it's a bugfix release, so let's get it stable and drop old versions.

[Comment 1 John Helmert III 2021-10-28 19:56:17 UTC]

This is a regular stablereq, maintainer should be assigned.

[Comment 2 Agostino Sarubbo 2021-10-29 05:52:33 UTC]

amd64 stable

[Comment 3 Sam James 2021-10-29 18:30:17 UTC]

arm64 done

[Comment 4 Sam James 2021-10-29 18:32:28 UTC]

ppc64 done

[Comment 5 Agostino Sarubbo 2021-10-30 17:24:25 UTC]

x86 stable. Closing.