Re: pkg/55684 (Absolute & relative directory traversal with archivers/zoo)

[Benny Siegert <bsiegert%gmail.com@localhost>]

The following reply was made to PR pkg/55684; it has been noted by GNATS.

From: Benny Siegert <bsiegert%gmail.com@localhost>
To: gnats-bugs%netbsd.org@localhost
Cc: pkg-manager%netbsd.org@localhost, security-officer%netbsd.org@localhost, 
    pkgsrc-bugs%netbsd.org@localhost, gnats-admin%netbsd.org@localhost, martin%netbsd.org@localhost, 
    stegozor%gmail.com@localhost
Subject: Re: pkg/55684 (Absolute & relative directory traversal with
 archivers/zoo)
Date: Sun, 4 Oct 2020 09:34:44 +0000 (UTC)

 FWIW, Debian has removed zoo from the archive. Its upstream is dead, and 
 there are no patches for the traversal vulnerabilities.