On 2023/04/24 22:46, Bjorn Ketelaars wrote:
> Diff below updates restic to 0.5.2, which is a bugfix release. Changes
> mentioned on https://github.com/restic/restic/releases/tag/v0.15.2:
> - Update golang.org/x/net to address CVE-2022-41723
> - Sanitize filenames printed by backup during processing
> - Make dump interpret --host and --path correctly
> 
> Build- and lightly run-tested on amd64.
> 
> Comments / OK?

OK.

I hate how the CVE reference makes it seem like that's the more important
of the security-related fixes when the 'sanitize filenames printed' is
more likely to fix an actual problem (under certain conditions)!

Reply via email to