From: Bdale Garbee <bdale@gag.com>
Date: Thu, 8 Jun 2017 18:30:15 +0000 (-0600)
Subject: Merge branch 'next' into dfsg-debian
X-Git-Url: https://git.gag.com/?a=commitdiff_plain;h=4b15127328bfe8ace09039e75a4c1ddea5854db2;hp=3b3e11a0be384ef9fe2f7e08c6fe1b6f125d0543;p=debian%2Ftar

Merge branch 'next' into dfsg-debian
---

diff --git a/debian/changelog b/debian/changelog
index f7f3daee..65fb236c 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,14 +1,18 @@
-tar (1.29b-3) UNRELEASED; urgency=medium
+tar (1.29b-2) unstable; urgency=medium
 
+  * add suggests tar-doc, closes: #856958
   * dump test results into build log on make check failure for kfreebsd team
 
  -- Bdale Garbee <bdale@gag.com>  Thu, 08 Jun 2017 12:20:20 -0600
 
-tar (1.29b-2) unstable; urgency=medium
+tar (1.29b-1.1) unstable; urgency=medium
 
-  * add suggests tar-doc, closes: #856958
+  * Non-maintainer upload.
+  * CVE-2016-6321: Bypassing the extract path name.
+    When extracting, member names containing '..' components are skipped.
+    (Closes: #842339)
 
- -- Bdale Garbee <bdale@gag.com>  Tue, 07 Mar 2017 08:49:50 -0700
+ -- Salvatore Bonaccorso <carnil@debian.org>  Sun, 30 Oct 2016 07:35:31 +0100
 
 tar (1.29b-1) unstable; urgency=medium
 
diff --git a/debian/patches/When-extracting-skip-.-members.patch b/debian/patches/When-extracting-skip-.-members.patch
new file mode 100644
index 00000000..b6241370
--- /dev/null
+++ b/debian/patches/When-extracting-skip-.-members.patch
@@ -0,0 +1,33 @@
+Description: When extracting, skip ".." members (CVE-2016-6321)
+Origin: upstream,  http://git.savannah.gnu.org/cgit/tar.git/commit/?id=7340f67b9860ea0531c1450e5aa261c50f67165d
+Bug-Debian: https://bugs.debian.org/842339
+Forwarded: not-needed.
+Author: Paul Eggert <eggert@Penguin.CS.UCLA.EDU>
+Last-Update: 2016-10-30
+---
+ src/extract.c | 8 ++++++++
+ 2 files changed, 15 insertions(+), 1 deletion(-)
+
+--- a/src/extract.c
++++ b/src/extract.c
+@@ -1629,12 +1629,20 @@ extract_archive (void)
+ {
+   char typeflag;
+   tar_extractor_t fun;
++  bool skip_dotdot_name;
+ 
+   fatal_exit_hook = extract_finish;
+ 
+   set_next_block_after (current_header);
+ 
++  skip_dotdot_name = (!absolute_names_option
++		      && contains_dot_dot (current_stat_info.orig_file_name));
++  if (skip_dotdot_name)
++    ERROR ((0, 0, _("%s: Member name contains '..'"),
++	    quotearg_colon (current_stat_info.orig_file_name)));
++
+   if (!current_stat_info.file_name[0]
++      || skip_dotdot_name
+       || (interactive_option
+ 	  && !confirm ("extract", current_stat_info.file_name)))
+     {
diff --git a/debian/patches/series b/debian/patches/series
index b7090e0d..7c899e57 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -1,3 +1,4 @@
 pristine-tar.diff
 listed03-linux-only
 rmt.8-header-wrong
+When-extracting-skip-.-members.patch