Debian Patches

Status for apktool/2.7.0+dfsg-7

Patch Description Author Forwarded Bugs Origin Last update
debian-wrapper.patch debian wrapper Markus Koschany <apo@debian.org> no 2016-05-21
use_system_framework.patch use_system_framework
Rather than including a package provided apk in the jar,
just read it directly from where it gets installed.		 Markus Koschany <apo@debian.org> no 2018-04-08
use_system_aapt.patch use_system_aapt Markus Koschany <apo@debian.org> no 2018-04-08
build.patch build Markus Koschany <apo@debian.org> no 2020-03-29
CVE-2024-21633-Prevent-arbitrary-file-writes-with-malicious-resourc.patch [PATCH 1/1] Prevent arbitrary file writes with malicious resource names. (#3484)

CVE-2024-21633

* refactor: rename sanitize function

* fix: expose getDir

* fix: safe handling of untrusted resource names

- fixes: GHSA-2hqv-2xv4-5h5w

* test: sample file for GHSA-2hqv-2xv4-5h5w

* refactor: avoid detection of absolute files for resource check

* chore: enable info mode on gradle

* test: skip test on windows

* chore: debug windows handling

* fix: normalize entry with file separators

* fix: normalize filepath after cleansing

* chore: Android paths are not OS specific

* refactor: use java.nio for path traversal checking

* chore: align path separator on Windows for Zip files

* chore: rework towards basic directory traversal

* chore: remove '--info' on build.yml		 Connor Tumbleson <iBotPeaches@users.noreply.github.com> yes 2024-01-02

All known versions for source package 'apktool'

Links