Skip to content

Absolute path /home/megabug/Code/arduino-1.8.19.tar.xz in release SHA512 file #11911

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
trn1ty opened this issue Sep 19, 2023 · 3 comments
Closed
Labels
Component: IDE The Arduino IDE security Security fixes / bugs / improvements Type: Wontfix Arduino has decided that it will not resolve the reported issue or implement the requested feature

Comments

@trn1ty
Copy link

trn1ty commented Sep 19, 2023

The SHA512 file for the latest release includes the absolute file location for the tarball rather than a relative location. This doesn't seem critical or anything but the person assembling the tarball may want to avoid leaking their directory layout just out of principle, or it might be keen to have a build script generate the file rather than doing so manually.

@per1234 per1234 changed the title /home/megabug/Code/arduino-1.8.19.tar.xz in release SHA512 file Absolute path /home/megabug/Code/arduino-1.8.19.tar.xz in release SHA512 file Sep 19, 2023
@cmaglie
Copy link
Member

cmaglie commented Oct 3, 2023

Could you tell us the URL of the file?
I checked the one here https://downloads.arduino.cc/arduino-1.8.19.sha512sum.txt and it looks fine.

@cmaglie
Copy link
Member

cmaglie commented Oct 3, 2023

Nevermind, I found it: https://github.com/arduino/Arduino/releases/tag/1.8.19

the person assembling the tarball may want to avoid leaking their directory layout just out of principle, or it might be keen to have a build script generate the file rather than doing so manually

Actually, it was generated by a script, but never cared about the path.

@cmaglie cmaglie closed this as completed Oct 3, 2023
@per1234 per1234 added Component: IDE The Arduino IDE Type: Wontfix Arduino has decided that it will not resolve the reported issue or implement the requested feature security Security fixes / bugs / improvements labels Oct 3, 2023
@trn1ty
Copy link
Author

trn1ty commented Oct 4, 2023

Just wanted to give a heads up.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Component: IDE The Arduino IDE security Security fixes / bugs / improvements Type: Wontfix Arduino has decided that it will not resolve the reported issue or implement the requested feature
Projects
None yet
Development

No branches or pull requests

3 participants