Branches for Dapper

Name Status Last Modified Last Commit
lp:ubuntu/dapper/tar 1 Development 2009-06-28 11:38:04 UTC
7. Do not mess with directory permission...

Author: Ian Jackson
Revision Date: 2006-04-05 17:25:15 UTC

Do not mess with directory permissions when extracting
without -p. Malone 19540.

lp:ubuntu/dapper-security/tar 1 Development 2009-06-28 11:38:10 UTC
10. * SECURITY UPDATE: stack-based buffer...

Author: Jamie Strandboge
Revision Date: 2009-01-14 09:10:49 UTC

* SECURITY UPDATE: stack-based buffer overflow with malicious tar files
  - src/names.c: updated src/names.c to rewrite hash_string_prefix as
    hash_string_insert_prefix and adjust safer_name_suffix to use
    hash_string_insert_prefix to avoid stack allocation
  - patch from upstream paxlib commits:
    http://git.savannah.gnu.org/gitweb/?p=paxutils.git;a=commitdiff;h=b9199bbdefd32382953dd8c01ec881e5463c5a88
    http://git.savannah.gnu.org/gitweb/?p=paxutils.git;a=commitdiff;h=64379227940699a92113e3fd7c583e705a1f849b
  - CVE-2007-4476
  - LP: #180299
* adjust tests/pipe.at pipe the output from `tar xfv' through sort and
  regenerate tests/testsuite with autom4ke to get tests working again (how
  did it ever successfully build before?)

lp:ubuntu/dapper-updates/tar bug 1 Development 2009-06-28 11:40:16 UTC
10. * SECURITY UPDATE: stack-based buffer...

Author: Jamie Strandboge
Revision Date: 2009-01-14 09:10:49 UTC

* SECURITY UPDATE: stack-based buffer overflow with malicious tar files
  - src/names.c: updated src/names.c to rewrite hash_string_prefix as
    hash_string_insert_prefix and adjust safer_name_suffix to use
    hash_string_insert_prefix to avoid stack allocation
  - patch from upstream paxlib commits:
    http://git.savannah.gnu.org/gitweb/?p=paxutils.git;a=commitdiff;h=b9199bbdefd32382953dd8c01ec881e5463c5a88
    http://git.savannah.gnu.org/gitweb/?p=paxutils.git;a=commitdiff;h=64379227940699a92113e3fd7c583e705a1f849b
  - CVE-2007-4476
  - LP: #180299
* adjust tests/pipe.at pipe the output from `tar xfv' through sort and
  regenerate tests/testsuite with autom4ke to get tests working again (how
  did it ever successfully build before?)

13 of 3 results