Skip to content

v0.3.2

Choose a tag to compare

View all tags
@thaJeztah thaJeztah released this 31 Jul 16:49
v0.3.2
This tag was signed with the committer’s verified signature.
thaJeztah Sebastiaan van Stijn
GPG key ID: 76698F39D527CE8C
Verified
Learn about vigilant mode.
9e6d2c7
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

Fix a regression introduced in v0.3.0 that caused archive extraction to fail when paths traversed absolute symlinks inside the destination root, such as var/run -> /run. Absolute symlink targets are now resolved relative to the extraction root while relative symlink escapes remain rejected. #93

Full Changelog: v0.3.1...v0.3.2

Assets 2
Loading