|
2020-08-19
| ||
| 00:18 | • Fixed ticket [f9831fdef1]: Arbitrary file overwrite using symlinks plus 4 other changes artifact: d80591cb72 user: drh | |
|
2020-08-18
| ||
| 12:17 | When writing files to disk for a check-out, refuse to write through a symbolic link to a directory. Ticket [f9831fdef1d4edcc]. check-in: a64e384f0c user: drh tags: sec2020 | |
|
2020-08-17
| ||
| 19:03 | • Ticket [f9831fdef1] Arbitrary file overwrite using symlinks status still Open with 5 other changes artifact: efa1c51ead user: drh | |
| 17:34 | The allow-symlinks setting is no longer versionable and is off by default. The allow-symlinks setting no longer propagates with a clone. The help text for allow-symlinks discourages its use. There is a new --symlink flag on "fossil open" to permit the use of symlinks on an open, for the adventurous. Ticket [f9831fdef1d4edcc]. check-in: ff98dd5af6 user: drh tags: sec2020 | |
| 08:39 | • New ticket [f9831fdef1] Arbitrary file overwrite using symlinks. artifact: c95172ddcb user: drh | |
| Ticket UUID: | f9831fdef1d4edccd10e4e416062820b63a15ee4 | ||
| Title: | Arbitrary file overwrite using symlinks | ||
| Status: | Fixed | Type: | Code_Defect |
| Severity: | Critical | Priority: | Immediate |
| Subsystem: | Resolution: | Fixed | |
| Last Modified: | 2020-08-19 00:18:49 | ||
| Version Found In: | |||
| Description & Comments: | |||