rpms/tar
7
0
Fork 0
Code Issues Pull Requests Releases Activity

import UBI tar-1.35-9.el10_1

Browse Source
This commit is contained in:
eabdullin 2026-01-05 05:08:50 +00:00
parent 844eb470bf
commit d00520227a
2 changed files with 2457 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2422
tar-1.35-CVE-2025-45582.patch Normal file
View File

File diff suppressed because it is too large Load Diff

36
tar.spec
View File

@ -10,7 +10,7 @@ Summary: GNU file archiving program
Name: tar
Epoch: 2
Version: 1.35
Release: 7%{?dist}
Release: 9%{?dist}
License: GPL-3.0-or-later
URL: https://www.gnu.org/software/tar/
@ -27,6 +27,31 @@ Patch10: tar-1.33-fix-capabilities-test.patch
Patch11: tar-1.35-add-forgotten-tests-from-upstream.patch
Patch12: tar-1.35-revert-fix-savannah-bug-633567.patch
Patch13: tar-1.35-fix-spurious-diagnostic-during-extraction-of-.-with-keep-newer-files.patch
#tar commits from upstream
# 56fb4a96ca43c247261b8c04dd65592f990f98ac
# 7c241126f14975c7f5df4268b434f276fc7f8842
# bdd773d028cd21f9b76b8cc306c57e0db3607e82
# cdb586803b762d9021db2ae8bf5dad3f9b8e4f77
# 915a8077af12a3eaf7800dbb1a4259783d9933ca
# 8fca2d35e88d10f0ddcb36720e88f40ac57f67f0
# e1445cfdf0dfd2f792532afc1eb18b01523dbfb4
# 75b03fdff48916bd0654677ed21379bdb0db016d
# 8767b1c84a910cce562059abad5bbf14e72434a0
#Gnulib commits from upstream to bring openat2 support
# 0b97ffdf32bdab909d02449043447237273df75e
# c706216fec5a509bf9b1214892de01aa9303ade0
# c6502cda83752ff2235d2064c213e7a9e2214201
# 5746cd1cdbb2caf0e321ea79041885fc7ef22423
# 3d23c8df2582a6b0e44e048d431ecb00a14667ec
# a209366ed34eca8ede481ec1b1c4e22f614c448d
# 8e85114bf1d51d9ea54a89f058c3a2cfa0c19c5e
# 6bff6c3741209e933e721e81e1b5c5abdbd4389a
# 24d2acd301cea7cde1928c84f926a54707e945d5
# 4e1fa851f4f43f749d18b83500757f5bcf1f47bd
# 20074698382b7e4f049f52bbdeaf6a39508a8601
# d1aeb7388926e045bdec0f7934c5522c4745f02c
# 45b6e6898d1f931bfca41d961289bd6ac33238e5
Patch14: tar-1.35-CVE-2025-45582.patch
BuildRequires: autoconf
BuildRequires: automake
@ -125,6 +150,15 @@ make check || (
%changelog
* Fri Dec 19 2025 Pavel Cahyna <pcahyna@redhat.com> - 2:1.35-9
- Fix a tiny mistake in the last patch affecting hardling extraction
(w/o visible consequences)
* Fri Dec 5 2025 Pavel Cahyna <pcahyna@redhat.com> - 2:1.35-8
- Backport upstream changes to jailify extraction directory
Includes related gnulib changes to add openat2
Fixes CVE-2025-45582
* Tue Feb 4 2025 Pavel Cahyna <pcahyna@redhat.com> - 2:1.35-7
- Backport upstream fix for savannah bug 65838, upstream commit 1e6ce98e