5 Commits

Author SHA1 Message Date
naddy
224f8d7051 Fix dead loop on extracting existing symlinks with the -k option.
From upstream.
2010-06-12 15:17:11 +00:00
naddy
5615100fa3 Update to 1.16.1. User-visible changes:
* New option --exclude-tag allows to specify "exclusion tag files".
* The --exclude-cache option now excludes the directories themselves, too.
* Support for reading ustar type 'N' logical records has been removed.
* Race conditions around 'tar -x --same-owner' have been fixed.
2006-12-14 20:29:00 +00:00
naddy
e448c78a4a SECURITY:
GNU tar allows user-assisted attackers to overwrite arbitrary files
via a tar file that contains a GNUTYPE_NAMES record with a symbolic
link. (CVE-2006-6097)
2006-11-30 20:37:29 +00:00
naddy
bcb59cf546 Update to 1.13.94:
- Added support for POSIX.1-2001 and ustar archive formats.
- Various option cleanups.
- New message translations.
- Bug fixes.

Switch to .bz2 distfile since we already depend on bzip2 anyway.
2004-04-22 02:56:10 +00:00
brad
317d1a5f0a Fix a directory traversal vulnerability in GNU tar 1.13.25 which allows
attackers to overwrite arbitrary files durring extraction via a ".."
in an extracted filename.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2002-0399
2002-10-01 02:03:52 +00:00