Commit Graph

18 Commits

Author SHA1 Message Date
naddy
5615100fa3 Update to 1.16.1. User-visible changes:
* New option --exclude-tag allows to specify "exclusion tag files".
* The --exclude-cache option now excludes the directories themselves, too.
* Support for reading ustar type 'N' logical records has been removed.
* Race conditions around 'tar -x --same-owner' have been fixed.
2006-12-14 20:29:00 +00:00
naddy
e448c78a4a SECURITY:
GNU tar allows user-assisted attackers to overwrite arbitrary files
via a tar file that contains a GNUTYPE_NAMES record with a symbolic
link. (CVE-2006-6097)
2006-11-30 20:37:29 +00:00
naddy
37fdb40795 update to 1.16 2006-11-13 16:25:10 +00:00
naddy
d5b99a068f SECURITY:
A buffer overflow allows user-complicit attackers to cause a denial
of service (application crash) and possibly execute code via
unspecified vectors involving PAX extended headers.
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0300

Fix via Ubuntu (ultimately from upstream CVS).

ok pvalchev@
2006-02-27 21:29:55 +00:00
naddy
74ed91d09d Fix large sparse file corruption.
From bug-tar mailing list via Han Boetes <han@mijncomputer.nl>.
2006-01-11 16:40:51 +00:00
naddy
5400bfd4d1 Fix command line parsing; from GNU CVS. 2005-01-30 14:56:57 +00:00
naddy
1e90401cd6 Update to 1.15.1.
- Compressed archives are now recognized automatically.
- Numerous bug fixes.
2005-01-01 23:47:43 +00:00
naddy
d01a6d3906 update to 1.14 2004-05-15 12:57:34 +00:00
naddy
bcb59cf546 Update to 1.13.94:
- Added support for POSIX.1-2001 and ustar archive formats.
- Various option cleanups.
- New message translations.
- Bug fixes.

Switch to .bz2 distfile since we already depend on bzip2 anyway.
2004-04-22 02:56:10 +00:00
sturm
5b293eeb3d (void *)NULL 2003-10-26 17:22:24 +00:00
brad
317d1a5f0a Fix a directory traversal vulnerability in GNU tar 1.13.25 which allows
attackers to overwrite arbitrary files durring extraction via a ".."
in an extracted filename.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2002-0399
2002-10-01 02:03:52 +00:00
naddy
e677b23011 Update to 1.13.25:
* New option --overwrite-dir.
* Fixes for buffer overrun, porting, and copyright notice problems.
2001-11-05 00:58:29 +00:00
naddy
881b3007a0 - update to 1.13.23; input from todd@
- fix install of info docs
2001-09-19 17:30:44 +00:00
naddy
997a37376c Update to 1.13.22. Note:
- The semantics for excludes have changed, and new options have
  been added in this area.
- bzip2 filtering has stabilized at -j.
2001-09-15 14:50:08 +00:00
naddy
a5cdf07c97 Update to 1.13.19; improve DESCR.
Partly from Cyrille Lefevre <clefevre@citeweb.net> via FreeBSD.
2001-01-22 00:13:32 +00:00
naddy
d07f000718 Update to 1.13.18.
Since the GNU project seems to have abandoned the idea of releases, we might
as well integrate nine months of bug fixes.
2000-12-21 19:38:11 +00:00
brad
c520ae706e upgrade to GNU tar 1.13.17; most of this came from naddy@ 2000-09-27 20:11:37 +00:00
brad
bb010b2e23 upgrade to GNU tar 1.13 1999-07-17 05:05:04 +00:00