Debian Patches
Status for buildstream/1.6.9-2+deb13u1
| Patch | Description | Author | Forwarded | Bugs | Origin | Last update |
|---|---|---|---|---|---|---|
| adjust-test-dependencies.patch | adjust test dependencies | Jeremy Bicha <jeremy.bicha@canonical.com> | no | 2019-09-28 | ||
| tar.py-Use-custom-extraction-filter.patch | tar.py: Use custom extraction filter The `tar` filter catches attempts to extract files outside the destination directory but does not catch hardlink targets outside the destination directory. The `data` filter catches both but doesn't preserve symlinks, which may break, e.g., rootfs tarball extraction. Define a custom extraction filter that uses the `data` filter except for symlinks where the `tar` filter is used. This backports an upstream patch (to the 2.x branch) to resolve CVE-2026-82331: https://github.com/apache/buildstream/pull/2192/changes/12b1f007b875b94d5b34ceeaf4dceb908a2a2a4b |
Theodore Tucker <theodore@tti0.net> | yes | 2026-09-23 |
All known versions for source package 'buildstream'
- 2.8.1-1 (forky, sid)
- 1.6.9-2+deb13u1 (trixie-security, trixie-proposed-updates)
- 1.6.9-2 (trixie)
- 1.6.8-2 (bookworm)