nixpkgs/pkgs/build-support/vm
Lancelot SIX 337cd5cc8a vmTools.fillDiskWithRPMs: fix cpio use
When updating to cpio-2.13 in fe758f5fa3,
a patch from SUSE was dropped. This patch was intended to resolve
CVE-2015-1197, and introduced the '--extract-over-symlink' option to
disable its own effects.

The CVE-2015-1197 was fixed in cpio-2.13 release[1] by other means,
making this patch useless.

Given that this patch is no longer used, we do not need to disable its
effects anymore with the `--extract-over-symlink` argument switch.

This Commit fixes #74984

[1] https://lists.gnu.org/archive/html/info-gnu/2019-11/msg00002.html
2019-12-08 21:03:39 +01:00
..
deb Add Debian 7.0 2013-05-07 11:19:46 +02:00
rpm vm/rpm/rpm-closure.pl: make it deterministic 2016-03-01 11:02:42 +01:00
windows treewide: remove empty let blocks 2019-12-04 06:00:00 -05:00
default.nix vmTools.fillDiskWithRPMs: fix cpio use 2019-12-08 21:03:39 +01:00
test.nix treewide: remove redundant rec 2019-08-28 11:07:32 +00:00