Package: tar
Version: 1.29b-1.1
Severity: normal
Tags: fixed-upstream,patch

Upstream discussion: 
https://lists.gnu.org/archive/html/bug-tar/2016-06/msg00013.html
Fix git commit id: 00f928642f7f7f1e7154a47df9cbf37ae70402ea ("sparse: fix pax 
extraction for unicode filenames")
Commit/Patch: 
http://git.savannah.gnu.org/cgit/tar.git/commit/?id=00f928642f7f7f1e7154a47df9cbf37ae70402ea

Using --sparse, --xattrs on a file which is (recognized as) sparse and
contains a non-ascii character, a tar file is created which, when
extracted, causes the file to have a wrong name (put into a subdirectory
named 'GNUSparseFile.$pid/').

During creation GNU tar writes a 'path' and a 'GNU.sparse.name' header,
with the 'path' header having a transformed name. During extraction
whichever comes last will replace the earlier header, while GNU.sparse.name
needs to take precedence.

-- System Information:
Debian Release: 9.1
  APT prefers stable-debug
  APT policy: (500, 'stable-debug'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.13.3-1-pve (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL 
set to en_US.UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set 
to en_US.UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages tar depends on:
ii  libacl1      2.2.52-3+b1
ii  libc6        2.24-11+deb9u1
ii  libselinux1  2.6-3+b1

tar recommends no packages.

Versions of packages tar suggests:
ii  bzip2        1.0.6-8.1
pn  ncompress    <none>
pn  tar-doc      <none>
pn  tar-scripts  <none>
ii  xz-utils     5.2.2-1.2+b1

-- no debconf information

Reply via email to