mirror of
https://git.yoctoproject.org/poky
synced 2026-09-15 15:49:32 +02:00
Skip members whose names contain "..". Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6321 Upstream patch: http://git.savannah.gnu.org/cgit/tar.git/commit/?id=7340f67b9860ea0531c1450e5aa261c50f671 (From OE-Core rev: 3dd835eb0cdd6f530aef5c870d06bc971eec7857) Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Ross Burton <ross.burton@intel.com> (cherry picked from commit cfa2b5facd1aa6a2bac4cb04687e1a977c533934) Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>