Change log for tar package in Debian

157 of 57 results
Published in bullseye-release
tar (1.34+dfsg-1+deb11u1) bullseye; urgency=medium

  * Non-maintainer upload.
  * Fix boundary checking in base-256 decoder (CVE-2022-48303)
  * Fix handling of extended header prefixes (CVE-2023-39804)
    (Closes: #1058079)

 -- Salvatore Bonaccorso <email address hidden>  Sat, 20 Jan 2024 10:59:10 +0100
Published in bookworm-release
tar (1.34+dfsg-1.2+deb12u1) bookworm; urgency=medium

  * Non-maintainer upload.
  * Fix boundary checking in base-256 decoder (CVE-2022-48303)
  * Fix handling of extended header prefixes (CVE-2023-39804)
    (Closes: #1058079)

 -- Salvatore Bonaccorso <email address hidden>  Sat, 20 Jan 2024 10:27:07 +0100
Published in sid-release
tar (1.35+dfsg-3) unstable; urgency=medium

  [ Gianfranco Costamagna ]
  * Team upload (salsa.debian.org/debian namespace)

  [ Helmut Grohne ]
  * Non-maintainer upload.
  * Move tar to /usr for DEP17. (Closes: #1059818)

 -- Helmut Grohne <email address hidden>  Mon, 01 Jan 2024 22:15:10 +0100

Available diffs

Superseded in sid-release
tar (1.35+dfsg-2) unstable; urgency=medium

  * Team upload (salsa.debian.org/debian namespace)
  * Add missing changelog entries from previous upload
  * Drop workaround for tar < 1.35
  * Add files to not-installed to fix FTBFS on arch:all
    and arch:any when they are not built together

 -- Gianfranco Costamagna <email address hidden>  Fri, 29 Dec 2023 14:15:35 +0100
Superseded in sid-release
tar (1.35+dfsg-1) unstable; urgency=medium

  * Team upload (salsa.debian.org/debian namespace)
  * New upstream version
  * Drop patches now part of upstream codebase:
    - CVE-2022-48303.patch
    - Fix-handling-of-extended-header-prefixes.patch CVE-2023-39804
    - gcc-10-warnings.diff
  * Refresh patches:
    - oldgnu-unknown-mode-bits.patch
    - pristine-tar.diff
    - proper_it_translation.patch
  * Add myself to copyright file to please lintian
  * Update copyright file
  * Add new LGPL-2.1+ files to copyright

 -- Gianfranco Costamagna <email address hidden>  Wed, 20 Dec 2023 09:23:02 +0100

Available diffs

Superseded in sid-release
tar (1.34+dfsg-1.4) unstable; urgency=medium

  [ Chirayu Desai ]
  * Import upstream patch to fix '--delete' (Closes: #944118)
    (Already fixed in 1.34)

  [ Gioele Barabucci ]
  * d/control: Build tar-scripts as Architecture: all (Closes: #1050568)
  * d/tar-scripts.lintian-overrides: Update to new syntax
  * d/tar-scripts.lintian-overrides: Ignore no-manual-page warnings
  * d/rules: Use standard dh sequence (Closes: #1048718, #1050565, #1050566)

  [ Gianfranco Costamagna ]
  * Non-maintainer upload.
  * Add fix from Ubuntu for CVE-2022-48303

 -- Gianfranco Costamagna <email address hidden>  Wed, 20 Dec 2023 08:03:20 +0100
Superseded in sid-release
tar (1.34+dfsg-1.3) unstable; urgency=medium

  * Non-maintainer upload.
  * Fix handling of extended header prefixes (CVE-2023-39804)
    (Closes: #1058079)

 -- Salvatore Bonaccorso <email address hidden>  Wed, 13 Dec 2023 16:22:08 +0100
Superseded in bookworm-release
Superseded in sid-release
tar (1.34+dfsg-1.2) unstable; urgency=medium

  * Non-maintainer upload.
  * Build with lfs and -D_TIME_BITS=64 on 32 bits archs (Closes: #1026204)
    Thanks to Andreas Henriksson and Helge Deller

 -- Paul Gevers <email address hidden>  Thu, 06 Apr 2023 16:25:47 +0200

Available diffs

Superseded in sid-release
tar (1.34+dfsg-1.1) unstable; urgency=medium

  * Non-maintainer upload

  [ Mechtilde ]
  * [730f266] Improved d/copyright with patch 
    from Bastian Germann <email address hidden> (Closes:  #1024084)

 -- Mechtilde Stehmann <email address hidden>  Sun, 20 Nov 2022 15:52:41 +0100
Superseded in bullseye-release
Superseded in sid-release
tar (1.34+dfsg-1) unstable; urgency=medium

  * New upstream version

 -- Janos Lenart <email address hidden>  Wed, 17 Feb 2021 09:55:26 +0000
Superseded in sid-release
tar (1.33+dfsg-1) unstable; urgency=medium

  * New upstream version
  * Removed unsafe escaping from mailcap-entry; closes: #982614
  * Fixed trailing whitespaces in debian/{changelog,control,rules}

 -- Janos Lenart <email address hidden>  Fri, 12 Feb 2021 15:15:21 +0000

Available diffs

Superseded in sid-release
tar (1.32+dfsg-1) unstable; urgency=medium

  * New upstream version; closes: #892273
  * Huge thanks to Bdale for maintaining tar since 1995; closes: #973844

 -- Janos Lenart <email address hidden>  Fri, 20 Nov 2020 09:52:51 +0000

Available diffs

Superseded in sid-release
tar (1.30+dfsg-7) unstable; urgency=medium

  * remove libattr1-dev build-dep, as we no longer use it, closes: #953902

 -- Bdale Garbee <email address hidden>  Sat, 14 Mar 2020 14:24:29 -0600

Available diffs

Published in buster-release
Superseded in sid-release
tar (1.30+dfsg-6) unstable; urgency=medium

  * eliminate ancient prerm cleanup code that breaks with merged /usr, 
    and is no longer considered useful, closes: #926722

 -- Bdale Garbee <email address hidden>  Tue, 23 Apr 2019 10:05:54 -0600

Available diffs

Superseded in buster-release
Superseded in sid-release
tar (1.30+dfsg-5) unstable; urgency=medium

  * change libexecdir in configure to /usr/sbin, closes: #760247, #919493
  * switched to upstream man pages as of 1.29b, closes: #729980, #391060
  * add references to the non-free tar-doc package, and the URL for the
    tar documentation on the FSF's web site to README.Debian, 
    closes: #711726

 -- Bdale Garbee <email address hidden>  Mon, 04 Feb 2019 10:43:28 -0700

Available diffs

Superseded in buster-release
Superseded in sid-release
tar (1.30+dfsg-4) unstable; urgency=medium

  * merge NMU 
  * update standards version
  * include upstream homepage reference, closes: #888210

 -- Bdale Garbee <email address hidden>  Sat, 05 Jan 2019 16:15:25 -0700

Available diffs

Superseded in buster-release
Superseded in sid-release
tar (1.30+dfsg-3) unstable; urgency=medium

  * elide reference to non-existent section 5 page from section 1 tar manpage,
    closes: #846490
  * update README.Debian to reflect ncompress now being in main
  * remove the NEWS file since it's more than a decade since the latest content
    and the text there confuses new users
  * stop delivering the /etc/rmt script, use a symlink instead, closes: #653043
  * fold in patch for difflink.at (test number 92) that fixes kfreebsd builds,
    closes: #837351
  * apply patch to allow test suite to pass on Hurd again, closes: #910985
  * apply patch to incorporate zstd support, closes: #894065
  * apply patch to correct Italian translation, closes: #852462

 -- Bdale Garbee <email address hidden>  Fri, 16 Nov 2018 21:33:47 -1000

Available diffs

Superseded in buster-release
Superseded in sid-release
tar (1.30+dfsg-2) unstable; urgency=medium

  * updated pristine-tar patch from Antonio Terceiro, making it possible for
    pristine-tar to ask tar to recreate pre-1.30 broken behavior so that it's
    possible to recover a tar file stored in a repo in the old, broken format.
    closes: #897653
  * patch from upstream that fixes race condition in dirrem01 and dirrem02
    tests when building on a slow machine, closes: #897591

 -- Bdale Garbee <email address hidden>  Wed, 16 May 2018 01:47:48 -0600
Superseded in sid-release
tar (1.30+dfsg-1) unstable; urgency=medium

  * new upstream version
  * update Vcs entries for move of packaging repo to salsa.debian.org
  * add depends/conflicts tar version details to tar-scripts, closes: #865428

 -- Bdale Garbee <email address hidden>  Sun, 29 Apr 2018 12:39:42 -0600
Superseded in buster-release
Superseded in sid-release
tar (1.29b-2) unstable; urgency=medium

  * add suggests tar-doc, closes: #856958
  * increase test suite verbosity and dump test results into build log on 
    make check failure for kfreebsd team
  * move primary git repo to collab-maint

 -- Bdale Garbee <email address hidden>  Fri, 21 Jul 2017 08:35:22 -0600

Available diffs

Published in jessie-release
tar (1.27.1-2+deb8u1) jessie-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * CVE-2016-6321: Bypassing the extract path name.
    When extracting, member names containing '..' components are skipped.
    (Closes: #842339)

 -- Salvatore Bonaccorso <email address hidden>  Sun, 30 Oct 2016 07:48:55 +0100
Superseded in buster-release
Published in stretch-release
Superseded in sid-release
tar (1.29b-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * CVE-2016-6321: Bypassing the extract path name.
    When extracting, member names containing '..' components are skipped.
    (Closes: #842339)

 -- Salvatore Bonaccorso <email address hidden>  Sun, 30 Oct 2016 07:35:31 +0100

Available diffs

Superseded in stretch-release
Superseded in sid-release
tar (1.29b-1) unstable; urgency=medium

  * re-constitute the 1.29 orig.tar with man pages as version 1.29b
  * re-enable parallel builds and increase build verbosity, closes: #824631
  * switch to man pages provided by upstream since 1.28, closes: #827017, 
    #391714, #473228, #524819, #711725, #720877, #766016, #779795.

 -- Bdale Garbee <email address hidden>  Fri, 22 Jul 2016 13:13:55 -0600

Available diffs

Superseded in stretch-release
Superseded in sid-release
tar (1.29-1) unstable; urgency=medium

  * new upstream version, closes: #816072

 -- Bdale Garbee <email address hidden>  Tue, 17 May 2016 12:37:57 -0600

Available diffs

Superseded in stretch-release
Superseded in sid-release
tar (1.28-2.2) unstable; urgency=medium

  * Non-maintainer upload.
  * debian/patches/0001-Work-around-unlinkat-bug-on-FreeBSD-and-GNU-
    Hurd.patch: upstream testsuite fixes for GNU/HURD and KFreeBSD-*
    ports.

 -- Gianfranco Costamagna <email address hidden>  Wed, 27 Apr 2016 13:13:03 +0200

Available diffs

Superseded in stretch-release
Superseded in sid-release
tar (1.28-2.1) unstable; urgency=medium

  * Non-maintainer upload.
  [ Gianfranco Costamagna ]
  * Disable silent rules, to have more verbose builds.
  * Fix missing MAKEFLAGS in $(MAKE) call, preventing parallel builds.

  [ Marc Deslauriers ]
  * debian/patches/use-sort-in-t-dir-tests.diff: upstream patch to fix
    test sort order (Closes: #803012)

 -- Gianfranco Costamagna <email address hidden>  Wed, 04 Nov 2015 10:04:22 +0100
Superseded in sid-release
tar (1.28-2) unstable; urgency=low

  * patch from upstream to fix --files-from and recursive extract,
    closes: #800380

 -- Bdale Garbee <email address hidden>  Mon, 28 Sep 2015 15:39:02 -0600
Superseded in stretch-release
Superseded in sid-release
tar (1.28-1) unstable; urgency=low

  * new upstream version
  * patch from Reiner Herrman that sets timestamp in generated manpage to 
    latest changelog date to make building the package reproducible, 
    closes: #774463
  * patch from Lunar adding --clamp-mtime option for reproducible builds,
    closes: #790415

 -- Bdale Garbee <email address hidden>  Sun, 23 Aug 2015 19:56:52 +0200
Superseded in stretch-release
Superseded in jessie-release
Superseded in sid-release
tar (1.27.1-2) unstable; urgency=low


  * patch from David Gilman adds watch file with signature verification, 
    closes: #742351
  * patch from David Gilman fixes problem with multi-line descriptions,
    closes: #593149

 -- Bdale Garbee <email address hidden>  Sat, 22 Mar 2014 15:55:03 -0600

Available diffs

Superseded in jessie-release
Superseded in sid-release
tar (1.27.1-1) unstable; urgency=low


  * new upstream version

 -- Bdale Garbee <email address hidden>  Mon, 03 Feb 2014 18:05:53 -0700

Available diffs

Superseded in sid-release
tar (1.27-4) unstable; urgency=low


  * add ACL, XATTR, and SELinux support by augmenting build-deps so the
    configure will find the right libraries, closes: #732071

 -- Bdale Garbee <email address hidden>  Sat, 14 Dec 2013 10:05:08 -0700

Available diffs

Superseded in sid-release
tar (1.27-3) unstable; urgency=low


  * patch from Joey Hess to allow tar to replicate 1.26 output on behalf
    of pristine-tar, closes: #728025
  * honor DEB_BUILD_OPTIONS parallel=<n>, honor dpkg-buildflags in build
    target in addition to configure target, closes: #727196
  * lower mime priority to 1 so interactive packages using the default
    priority of 5 win, closes: #727303

 -- Bdale Garbee <email address hidden>  Sun, 03 Nov 2013 09:40:31 -0700

Available diffs

Superseded in sid-release
tar (1.27-1) unstable; urgency=low


  * new upstream version
  * prefix backup and restore scripts with tar- to avoid conflicts with
    other packages like openafs-client, closes: #724064, #724240
  * move "libexec" content in tar-scripts to /usr/lib/tar, closes: #724238

 -- Bdale Garbee <email address hidden>  Tue, 15 Oct 2013 09:56:45 -0600
Superseded in sid-release
tar (1.26+dfsg-10) unstable; urgency=low


  * tar-scripts should be optional, not required

 -- Bdale Garbee <email address hidden>  Sun, 22 Sep 2013 01:09:42 -0600
Superseded in jessie-release
Superseded in sid-release
tar (1.26+dfsg-8) unstable; urgency=low


  * cherry-pick upstream commit at Pino Toscano's suggestion to fix FTBFS
    on hurd-i386, closes: #719863

 -- Bdale Garbee <email address hidden>  Fri, 16 Aug 2013 11:37:40 +0200

Available diffs

Superseded in sid-release
tar (1.26+dfsg-7) unstable; urgency=low


  * cherry-pick upstream commit at Marc Schaeffer's suggestion to fix
    --compare failures, closes: #614085

 -- Bdale Garbee <email address hidden>  Thu, 15 Aug 2013 15:22:11 +0200
Superseded in jessie-release
Superseded in sid-release
tar (1.26+dfsg-6) unstable; urgency=low


  * cherry-pick upstream commit at Paul Eggert's suggestion to address link
    extraction issue, closes: #452365

 -- Bdale Garbee <email address hidden>  Fri, 31 May 2013 12:12:35 -0600

Available diffs

Superseded in jessie-release
Superseded in sid-release
tar (1.26+dfsg-5) unstable; urgency=low


  [ Wookey ]
  * Fix included gnulib so we don't get FTBFS with eglibc-2.16, 
    closes: #693352, #701419

  [ Bdale Garbee ]
  * update mailcap entries to use %s, closes: #681302
  * include the http://www.gnu.org/software/tar/utils/tarcat script for use 
    with multi-volume archives, closes: #492036

 -- Bdale Garbee <email address hidden>  Mon, 01 Apr 2013 09:17:04 -0600
Published in wheezy-release
Superseded in sid-release
tar (1.26+dfsg-0.1) unstable; urgency=low


  * non-maintainer upload
  * remove unused and non-DFSG compliant doc/*.texi and doc/*.info* files from
    source, closes: #695803

 -- David Prévot <email address hidden>  Mon, 31 Dec 2012 11:05:50 -0400
Superseded in wheezy-release
Superseded in sid-release
tar (1.26-4) unstable; urgency=low


  * mark "Mult-Arch: foreign" to ease crossgrading, closes: #649478
  * hardened build flags patch from Moritz Huehlenhoff, closes: #653722

 -- Bdale Garbee <email address hidden>  Fri, 30 Dec 2011 09:18:11 -0700
Superseded in wheezy-release
Superseded in sid-release
tar (1.26-3) unstable; urgency=low


  * only run listed03.at on Linux systems synce upstream says it's known to
    fail on BSD, apparently including our kfreebsd variants, closes: #639178

 -- Bdale Garbee <email address hidden>  Sat, 12 Nov 2011 11:49:38 -0700
Superseded in sid-release
tar (1.26-2) unstable; urgency=low


  * clean up various lintian warnings

 -- Bdale Garbee <email address hidden>  Wed, 17 Aug 2011 14:47:33 -0700
Superseded in sid-release
tar (1.26-1) unstable; urgency=low


  * new upstream version
  * add a check to the rules file to ensure test suite is not attempted while
    building as root, closes: #596268

 -- Bdale Garbee <email address hidden>  Wed, 17 Aug 2011 10:46:03 -0700
Superseded in wheezy-release
Superseded in sid-release
tar (1.25-3) unstable; urgency=low
  * cherry-pick some upstream commits that appear to address open bugs  * fix for --one-file-system and --listed-incremental together,    closes: #603371, #604394, #604698  * fix for FreeBSD symlink incompatibility with POSIX, closes: #602241 -- Bdale Garbee <email address hidden>  Mon, 06 Dec 2010 20:35:55 -0700
Superseded in sid-release
tar (1.25-2) unstable; urgency=low


  * accept a "hack" from Joey Hess to work around an unfortunate side effect 
    of removing the patch to src/create.c regarding links of 100 chars in
    1.23-4 that broke pristine-tar in some cases.  The "fix" is to support 
    the old behavior if the environment variable TAR_LONGLINK_100 is set, 
    which pristine-tar knows about and will use when necessary but which 
    should never be used by anyone else!  closes: #603231

 -- Bdale Garbee <email address hidden>  Fri, 12 Nov 2010 02:31:25 -0700
Superseded in sid-release
tar (1.25-1) unstable; urgency=low


  * new upstream version, closes: #602184, #602209, #602413, #575298
  * Add Vcs-Git, Vcs-Browser fields to debian/control using patch from
    Simon McVittie's 1.24-1.1 NMU, closes: #602639, #602709
  * stop patching src/list.c since it now does more harm than good,
    and add a Breaks against old dpkg versions, closes: #522858

 -- Bdale Garbee <email address hidden>  Wed, 10 Nov 2010 15:45:09 -0700
Superseded in sid-release
tar (1.24-1.1) unstable; urgency=low


  * Non-maintainer upload, acknowledged by cworth on IRC
  * Apply upstream commit 39136756 to fix extraction of device nodes
    (Closes: #602184)
  * Apply upstream commit acb77ac5 to fix extraction of directories
    while using the -C option (Closes: #602209, #602413)
  * Add Vcs-Git, Vcs-Browser fields to debian/control (Closes: #602639)

 -- Simon McVittie <email address hidden>  Sat, 06 Nov 2010 19:07:16 +0000
Superseded in sid-release
tar (1.24-1) unstable; urgency=low


  * new upstream version

 -- Bdale Garbee <email address hidden>  Mon, 01 Nov 2010 17:26:56 -0600
Published in squeeze-release
Superseded in sid-release
tar (1.23-3) unstable; urgency=medium


  * add xz-utils back to the Suggests list since it may not be 'required'
    forever
  * current debhelper includes trigger support, closes: #561598
  * patch from upstream to fix ability of rmt to accept mixed file mode
    representations, closes: #587702, #597672

 -- Bdale Garbee <email address hidden>  Wed, 22 Sep 2010 00:33:16 -0600
Superseded in squeeze-release
Superseded in sid-release
tar (1.23-2.1) unstable; urgency=low


  * Non-maintainer upload.
  * src/extract.c: Apply upstream git commit b60e56fd which fixes a dead loop
    on extracting existing symlinks with the -k option, closes: #577978,
    #576876.

 -- Michael Banck <email address hidden>  Sun, 18 Jul 2010 17:14:48 +0200
Published in lenny-release
tar (1.20-1+lenny1) stable; urgency=high


  * back-port security issue from 1.23 as per CVE-2010-0624, that basically
    amounts to replacing the included rmt source with a fresher version taken
    from paxutils

 -- Bdale Garbee <email address hidden>  Wed, 10 Mar 2010 16:20:35 -0700
Superseded in squeeze-release
Superseded in sid-release
tar (1.23-2) unstable; urgency=low


  * use xz when lzma is called for, and stop suggesting both lzma since it's
    no longer used, and xz-utils since it's now priority required,
    closes: #582706, #523494

 -- Bdale Garbee <email address hidden>  Mon, 14 Jun 2010 11:05:57 -0600
Superseded in squeeze-release
Superseded in sid-release
tar (1.23-1) unstable; urgency=low


  * new upstream version, fixes security issue in rmt (CVE-2010-0624)
  * add suggests for lzma and xz-utils, closes: #523499

 -- Bdale Garbee <email address hidden>  Wed, 10 Mar 2010 09:51:37 -0700
Superseded in squeeze-release
Superseded in sid-release
tar (1.22-2) unstable; urgency=low


  * Add Carl Worth as an uploader.
  * Fix to allow parallel build (-j2), closes: #535319
  * Don't close file stream before EOF, closes: #525818
  * Preserve hard links with --remove-files, closes: #188663
    Thanks to Ted T'so for the idea and Sergey Poznyakoff for
    cleaning up my original implementation.
  * Respect DEB_BUILD_OPTIONS=nocheck to conform with Policy 3.8.2

 -- Carl Worth <email address hidden>  Tue, 04 Aug 2009 12:07:06 -0700
Superseded in sid-release
Superseded in squeeze-release
tar (1.22-1.1) unstable; urgency=low


  * Non-maintainer upload.
  * Set SIGPIPE to default action, patch from upstream. (closes: #532570)

 -- Bastian Blank <email address hidden>  Tue, 30 Jun 2009 22:23:48 +0200
Superseded in sid-release
Superseded in squeeze-release
tar (1.22-1) unstable; urgency=low


  * new upstream version
  * version the Replaces entry for cpio, closes: #483355
  * move config.* update to configure target, yields a smaller diff that 
    doesn't clash with git-buildpackage... already had autotools-dev build dep!
  * script debian/tarman contributed by Marcus Watts now used to create tar.1
    by processing usage text in source code!  Partial fix for #473328.
    closes: #515578, #429776, #411707, 

 -- Bdale Garbee <email address hidden>  Fri, 03 Apr 2009 01:33:52 -0600
Superseded in squeeze-release
Superseded in sid-release
Superseded in lenny-release
tar (1.20-1) unstable; urgency=low


  * new upstream version

 -- Bdale Garbee <email address hidden>  Wed, 16 Apr 2008 19:24:39 -0600
157 of 57 results