UDD
Skip Quicknav
Ultimate Database
Bugs search
Maintainer dashboard
Lintian
Lintian tags
Patches
Bugs usertags
Patches
Debian Patches
Status for apktool/2.7.0+dfsg-7
Search:
Patch
Description
Author
Forwarded
Bugs
Origin
Last update
build.patch
build
Markus Koschany <apo@debian.org>
no
2020-03-29
CVE-2024-21633-Prevent-arbitrary-file-writes-with-malicious-resourc.patch
[PATCH 1/1] Prevent arbitrary file writes with malicious resource names. (#3484)
CVE-2024-21633
* refactor: rename sanitize function
* fix: expose getDir
* fix: safe handling of untrusted resource names
- fixes: GHSA-2hqv-2xv4-5h5w
* test: sample file for GHSA-2hqv-2xv4-5h5w
* refactor: avoid detection of absolute files for resource check
* chore: enable info mode on gradle
* test: skip test on windows
* chore: debug windows handling
* fix: normalize entry with file separators
* fix: normalize filepath after cleansing
* chore: Android paths are not OS specific
* refactor: use java.nio for path traversal checking
* chore: align path separator on Windows for Zip files
* chore: rework towards basic directory traversal
* chore: remove '--info' on build.yml
Connor Tumbleson <iBotPeaches@users.noreply.github.com>
yes
2024-01-02
debian-wrapper.patch
debian wrapper
Markus Koschany <apo@debian.org>
no
2016-05-21
use_system_aapt.patch
use_system_aapt
Markus Koschany <apo@debian.org>
no
2018-04-08
use_system_framework.patch
use_system_framework
Rather than including a package provided apk in the jar,
just read it directly from where it gets installed.
Markus Koschany <apo@debian.org>
no
2018-04-08
Showing 1 to 5 of 5 entries
All known versions for source package 'apktool'
2.7.0+dfsg-7
(trixie, sid)
2.7.0+dfsg-6+deb12u1
(bookworm)
2.5.0+dfsg.1-2
(bullseye)
Links
Package Tracker for 'apktool'
Debian Maintainer Dashboard for 'apktool'
Browse sources for 'apktool/2.7.0+dfsg-7' on sources.debian.org
DEP3: Patch Tagging Guidelines