CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

archivers/gtar1.35_1

GNU version of the traditional tape archiver

Maintainer
naddy@FreeBSD.org
Packages
gtar 1.35_1
Upstream
up to date
CPE
gnu:tar from the port
WWW
https://www.gnu.org/software/tar/
Links
cgit · VuXML

Unaddressed (2) · The CVE record lists this version as affected, no VuXML entry names the CVE

CVE-2026-184774.42026-08-03A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write access to a directory being ba…
CVE-2026-185084.42026-08-03A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confined to the designated top-level directory and may …

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (5)

Show 5 fixed
VuXML entries whose affected range this version has left.

Commits (127)

Ade Lovett (ade) · 1.13.25_1
gettext upgrade uber-patch (stage 3)

- switch devel/gettext (0.11.1) on, installing full package
- flip devel/gettext-old (0.10.35) to installing only static binaries
  with a "-old" suffix -- gettext-old will have its deorbit burn
  sequence initiated just after 4.6-RELEASE
- fix up ports for the new world order

Reviewed by:	portmgr
f18cbf2fa6
Ade Lovett (ade) · 1.13.25
Stage 1 of gettext update.

Move gettext (0.10.35) with gettext-old
Update gettext from gettext-devel (0.10.40)
Remove gettext-devel
Fix dependencies

Stage 2 will involve upgraded gettext to 0.11 and fixing issues
Stage 3 involves a de-orbit burn sequence for gettext-old

Reviewed by:	portmgr
9210b7cb07
Christian Weisgerber (naddy) · 1.13.25
Update to 1.13.25: * New option --overwrite-dir. * Fixes for buffer overrun, porting, and copyright notice problems. * Add Korean message catalog.

Fixes:
* Don't pick up spurious iconv dependency.
* Remove home page from pkg-descr.  It provides little but
  historical information, and links to an outdated version of the
  GNU tar manuals, a current version of which ships with the port.

Approved by:	trevor
91f98f0e4f
Christian Weisgerber (naddy) · 1.13.23_1
- Fix "gtar --version" segfault on -STABLE reported by Jason R. Mastaler. - Bump the port revision. - Move PKGNAMEPREFIX to where portlint wants it.

PR:		30713
Approved by:	trevor
946c74b76f
Christian Weisgerber (naddy) · 1.13.23
Update my MAINTAINER address.

Approved by:	trevor
4fbb2f66a7
Pete Fritchman (petef) · 1.13.23
Update to 1.13.23

PR:		30689
Submitted by:	maintainer
d0349c312b
Akinori MUSHA (knu) · 1.13.22
Update to 1.13.22.

PR:		ports/30371
Submitted by:	Cyrille Lefevre <clefevre@citeweb.net>

Add a patch to work around a /bin/sh bug described in PR #30392.

Submitted by:	Christian Weisgerber <naddy@mips.inka.de>
638bd0a217
FUJISHIMA Satsuki (sf) · 1.13.19
change category to archivers.
fc7ec56394
FUJISHIMA Satsuki (sf) · 1.13.19
o update to 1.13.19. o deinstall info properly. o add WANT_STATIC flavor.

PR:		24502
Submitted by:	Cyrille Lefevre <clefevre@citeweb.net>,
		maintainer
8155707f26
Andreas Klemm (andreas) · 1.13.18_3
Changed maintainer to Christian Weisgerber <naddy@mips.inka.de> who wrote to me in personal e-mail to take over maintenance.
f988a86d6b
Andreas Klemm (andreas) · 1.13.18_3
Changed maintainer to ports, I want to reduce my personal workload. Maybe I take over again in the future if I have more time for this.
56ffabc919
Andreas Klemm (andreas) · 1.13.18_3
my last commit didn't add patch-ab which is necessary for package building but now..
f73e0e4a82
Andreas Klemm (andreas) · 1.13.18_3
import more stuff from PR 23815 - use PKGNAMEPREFIX so that package is named *g*tar like the port - patch-ac silences gcc when compiling prepargs.c additionally: - fetch patch-ab out of Attic, we still want info file not   splitted into pieces - bump PORTREVISION, since patch-ab fixes package building

PR:		23815
Submitted by:	Christian Weisgerber <naddy@mips.inka.de>
254d13095b
Andreas Klemm (andreas) · 1.13.18_2
explanation of previous committ, requested by Kris Kennaway: - added one category entry (archivers) - updated one locale entry in pkg-plist, which I overlooked This committ additionally bumps PORTREVISION, since updating the plist is a major issue.

PR:		23815
8c1db3c2a7
Andreas Klemm (andreas) · 1.13.18_1
include two changes of PR 23815, the rest is in discussion with 'naddy'.

PR:		23815
f4a414897a
Andreas Klemm (andreas) · 1.13.18_1
update to version 1.13.18 as requested by David.
f9d65e93ec
Andreas Klemm (andreas) · 1.13.17
- update port to last gtar release - fixes --exclude, -X problem in version 1.13, where excludes have been   wrongly interpreted as filenames (not pathnames) - some cosmetics from naddy

Submitted by:	Christian Weisgerber <naddy@unix-ag.uni-kl.de>
8244fc50b0
Michael Haro (mharo) · 1.13
Corrrect whitespace introduced during PORTNAME conversion and portlint
960543ecef
Andreas Klemm (andreas) · 1.13
update port to version 1.13

PR:		17894
739ed0d54b
Chris Piazza (cpiazza) · 1.12
Update with the new PORTNAME/PORTVERSION variable
f9bfad56c5
Michael Haro (mharo)
FreeBSD.ORG -> FreeBSD.org

Prompted by PR:  13476, 13477
Submitted by:  KATO Tsuguru
65ab34a667
Peter Wemm (peter)
$Id$ -> $FreeBSD$
8100143543
Michael Haro (mharo)
Remove the test to create ${PREFIX}/share/info/dir as it is now in bsd.port.mk and this helps to unify the check and install.
5ce8e8e5c7
Bill Fenner (fenner)
${MASTER_SITE_GNU} got rearranged in December; let's catch up.
5261958626
Satoshi Asami (asami)
Create info/dir before trying to use it.  Also, add install-info lines to PLIST.
da78791fe1
Satoshi Asami (asami)
No need to use += for variables defined only once.
bae0a242f4
Andreas Klemm (andreas)
import new port GNU tar 1.12, latest version
9a13ed58e8