Package: tar Version: 1.29b-1.1 Severity: normal Tags: fixed-upstream,patch
Upstream discussion: https://lists.gnu.org/archive/html/bug-tar/2016-06/msg00013.html Fix git commit id: 00f928642f7f7f1e7154a47df9cbf37ae70402ea ("sparse: fix pax extraction for unicode filenames") Commit/Patch: http://git.savannah.gnu.org/cgit/tar.git/commit/?id=00f928642f7f7f1e7154a47df9cbf37ae70402ea Using --sparse, --xattrs on a file which is (recognized as) sparse and contains a non-ascii character, a tar file is created which, when extracted, causes the file to have a wrong name (put into a subdirectory named 'GNUSparseFile.$pid/'). During creation GNU tar writes a 'path' and a 'GNU.sparse.name' header, with the 'path' header having a transformed name. During extraction whichever comes last will replace the earlier header, while GNU.sparse.name needs to take precedence. -- System Information: Debian Release: 9.1 APT prefers stable-debug APT policy: (500, 'stable-debug'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 4.13.3-1-pve (SMP w/8 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_US.UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_US.UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages tar depends on: ii libacl1 2.2.52-3+b1 ii libc6 2.24-11+deb9u1 ii libselinux1 2.6-3+b1 tar recommends no packages. Versions of packages tar suggests: ii bzip2 1.0.6-8.1 pn ncompress <none> pn tar-doc <none> pn tar-scripts <none> ii xz-utils 5.2.2-1.2+b1 -- no debconf information

