Debian Patches

Status for sos/4.12.0-2

Patch	Description	Author	Forwarded	Bugs	Origin	Last update
0001-cleaner-refuse-out-of-tree-tar-members-on-extract.patch	[PATCH 1/2] [cleaner] refuse out-of-tree tar members on extract sos clean used fully_trusted_filter plus a member-name-only path guard. That does not stop a symlink whose target is an absolute host path followed by a regular file with the same relative name, so extraction can write outside the dest directory. Use PEP-706 data_filter when available and skip FilterError members. Keep in-tree relative symlinks. Pre-filter the member list as well: Python 3.11.2 (Debian 12) ignores extraction_filter. Log skipped members. Non-root skips device nodes that mknod cannot create.	Sandipan Roy <saroy@redhat.com>	not-needed		upstream, https://github.com/sosreport/sos/commit/7837ba43e4473b9b71a86135b2ddeb3a5cf1cfbc	2026-09-25
0002-cleaner-refuse-out-of-tree-tar-members-for-hardlinks.patch	[PATCH 2/2] [cleaner] refuse out-of-tree tar members for hardlinks Followup of previous commit to fix a scenario with hardlinks pointing out of the tree.	Pavel Moravec <pmoravec@redhat.com>	not-needed		upstream, https://github.com/sosreport/sos/commit/417e25897181d3099bd39f85f0a68c1df4a11860	2026-09-25