A GNU file archiving program
decebd3bbe
This fixes a bug where incremental restore with cyclic renames between backups may create a temporary directory at an archive-controlled path outside the extraction tree relative to CWD (or absolute if starting with /). The fix for CVE-2025-45582 already prevents exploiting this problem, so it is more a correctness and hardening change. Resolves: RHEL-234448 |
||
|---|---|---|
| .fmf | ||
| .gitignore | ||
| plans.fmf | ||
| rpminspect.yaml | ||
| sources | ||
| STAGE1-tar | ||
| tar-1.28-atime-rofs.patch | ||
| tar-1.28-document-exclude-mistakes.patch | ||
| tar-1.28-loneZeroWarning.patch | ||
| tar-1.28-vfatTruncate.patch | ||
| tar-1.29-wildcards.patch | ||
| tar-1.30-disk-read-error.patch | ||
| tar-1.33-fix-capabilities-test.patch | ||
| tar-1.35-add-forgotten-tests-from-upstream.patch | ||
| tar-1.35-Avoid-acl_-prefix-for-functions.patch | ||
| tar-1.35-CVE-2025-45582.patch | ||
| tar-1.35-CVE-2026-5704.patch | ||
| tar-1.35-CVE-2026-18477.patch | ||
| tar-1.35-fix-absolute-one-top-level.patch | ||
| tar-1.35-Fix-Savane-bug-64581.patch | ||
| tar-1.35-fix-spurious-diagnostic-during-extraction-of-.-with-keep-newer-files.patch | ||
| tar-1.35-no-overwrite-dir-no-overwrite-even-temporarily.patch | ||
| tar-1.35-padding-zeros.patch | ||
| tar-1.35-revert-fix-savannah-bug-633567.patch | ||
| tar-1.35-tar-one-top-level-DIR-must-be-relative.patch | ||
| tar.spec | ||