A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write access to a directory being ba…
A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confined to the designated top-level directory and may …
VuXML only (0) · listed, port not fixed yet
None. pkg audit reports nothing for this version.
Fixed (5)
Show 5 fixed
VuXML entries whose affected range this version has left.
gettext upgrade uber-patch (stage 3)
- switch devel/gettext (0.11.1) on, installing full package
- flip devel/gettext-old (0.10.35) to installing only static binaries
with a "-old" suffix -- gettext-old will have its deorbit burn
sequence initiated just after 4.6-RELEASE
- fix up ports for the new world order
Reviewed by: portmgr
Update to 1.13.25: * New option --overwrite-dir. * Fixes for buffer overrun, porting, and copyright notice problems. * Add Korean message catalog.
Fixes:
* Don't pick up spurious iconv dependency.
* Remove home page from pkg-descr. It provides little but
historical information, and links to an outdated version of the
GNU tar manuals, a current version of which ships with the port.
Approved by: trevor
- Fix "gtar --version" segfault on -STABLE reported by Jason R. Mastaler. - Bump the port revision. - Move PKGNAMEPREFIX to where portlint wants it.
PR: 30713
Approved by: trevor
Update to 1.13.22.
PR: ports/30371
Submitted by: Cyrille Lefevre <clefevre@citeweb.net>
Add a patch to work around a /bin/sh bug described in PR #30392.
Submitted by: Christian Weisgerber <naddy@mips.inka.de>
import more stuff from PR 23815 - use PKGNAMEPREFIX so that package is named *g*tar like the port - patch-ac silences gcc when compiling prepargs.c additionally: - fetch patch-ab out of Attic, we still want info file not splitted into pieces - bump PORTREVISION, since patch-ab fixes package building
PR: 23815
Submitted by: Christian Weisgerber <naddy@mips.inka.de>
explanation of previous committ, requested by Kris Kennaway: - added one category entry (archivers) - updated one locale entry in pkg-plist, which I overlooked This committ additionally bumps PORTREVISION, since updating the plist is a major issue.
PR: 23815
- update port to last gtar release - fixes --exclude, -X problem in version 1.13, where excludes have been wrongly interpreted as filenames (not pathnames) - some cosmetics from naddy
Submitted by: Christian Weisgerber <naddy@unix-ag.uni-kl.de>