X-Git-Url: https://git.brokenzipper.com/gitweb?a=blobdiff_plain;f=NEWS;h=fa096500758cc21d3e7e47b2450cb99d233c09b1;hb=9bf87b195e732d03db5efc8850ac5e29a2538df9;hp=deb3baf246ea6b85ac7de95b0a3329cd353dfeee;hpb=01d61882973471f72122667e186331fdb6eee342;p=chaz%2Ftar diff --git a/NEWS b/NEWS index deb3baf..fa09650 100644 --- a/NEWS +++ b/NEWS @@ -1,6 +1,18 @@ GNU tar NEWS - User visible changes. Please send GNU tar bug reports to +* Support for reading ustar type 'N' header logical records has been removed. + This GNU extension was generated only by very old versions of GNU 'tar'. + Unfortunately its implementation had security holes; see + . + We don't expect that any tar archives in practical use have type 'N' + records, but if you have one and you trust its contents, you can + decode it with GNU tar 1.16 or earlier. + +* Race conditions have been fixed that in some cases briefly allowed + files extracted by 'tar -x --same-owner' (or plain 'tar -x', when + running as root) to be accessed by users that they shouldn't have been. + version 1.16 - Sergey Poznyakoff, 2006-10-21 * After creating an archive, tar exits with code 1 if some files were