rpms/tar
6
0
Fork 0
Code Issues Pull Requests Releases Activity

Backport changes to jailify extraction directory

Browse Source 
... and related gnulib changes to add openat2.

Fixes CVE-2025-45582.

Resolves: RHEL-111997
This commit is contained in:
Pavel Cahyna 2025-12-12 14:03:57 +01:00
parent bf6193c453
commit afa468847b
2 changed files with 2557 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2531
tar-1.34-CVE-2025-45582.patch Normal file
View File

File diff suppressed because it is too large Load Diff

26
tar.spec
View File

@ -23,6 +23,32 @@ Patch11: tar-1.30-padding-zeros.patch
Patch12: tar-1.30-disk-read-error.patch
Patch13: tar-1.34-CVE-2022-48303.patch
Patch14: tar-1.34-Warn-file-changed-as-we-read-it-less-often.patch
#tar commits from upstream
# 56fb4a96ca43c247261b8c04dd65592f990f98ac
# 7c241126f14975c7f5df4268b434f276fc7f8842
# bdd773d028cd21f9b76b8cc306c57e0db3607e82
# cdb586803b762d9021db2ae8bf5dad3f9b8e4f77
# 915a8077af12a3eaf7800dbb1a4259783d9933ca
# 8fca2d35e88d10f0ddcb36720e88f40ac57f67f0
# e1445cfdf0dfd2f792532afc1eb18b01523dbfb4
# 75b03fdff48916bd0654677ed21379bdb0db016d
# 8767b1c84a910cce562059abad5bbf14e72434a0
#Gnulib commits from upstream to bring openat2 support
# 0b97ffdf32bdab909d02449043447237273df75e
# c706216fec5a509bf9b1214892de01aa9303ade0
# c6502cda83752ff2235d2064c213e7a9e2214201
# 5746cd1cdbb2caf0e321ea79041885fc7ef22423
# 3d23c8df2582a6b0e44e048d431ecb00a14667ec
# a209366ed34eca8ede481ec1b1c4e22f614c448d
# 8e85114bf1d51d9ea54a89f058c3a2cfa0c19c5e
# 6bff6c3741209e933e721e81e1b5c5abdbd4389a
# 24d2acd301cea7cde1928c84f926a54707e945d5
# 4e1fa851f4f43f749d18b83500757f5bcf1f47bd
# 20074698382b7e4f049f52bbdeaf6a39508a8601
# d1aeb7388926e045bdec0f7934c5522c4745f02c
# 45b6e6898d1f931bfca41d961289bd6ac33238e5
# e54b645fc6b8422562327443bda575c65d931fbd
Patch23: tar-1.34-CVE-2025-45582.patch
BuildRequires: make
BuildRequires: gcc