Control: tag -1 confirmed Markus Koschany <apo@debian.org> (2017-06-02): > I would like to update xarchiver in Jessie. It was discovered that > data loss could occur when an archive name contained shell > metacharacters. [1] > > Please find attached the debdiff. > > Regards, > > Markus > > > [1] https://bugs.debian.org/862593 > diff -Nru xarchiver-0.5.4/debian/changelog xarchiver-0.5.4/debian/changelog > --- xarchiver-0.5.4/debian/changelog 2016-05-15 00:05:35.000000000 +0200 > +++ xarchiver-0.5.4/debian/changelog 2017-06-02 10:29:41.000000000 +0200 > @@ -1,3 +1,15 @@ > +xarchiver (1:0.5.4-1+deb8u2) jessie; urgency=medium > + > + [ Chris Lamb ] > + * Fix data-loss issue where adding files to a tar-based archive removed all > + existing content when the target filename included shell metacharacters. > + The test to see whether it already existed to determine whether to create > + a new archive or simply add a new file incorrectly used an escaped path. > + Thanks to Nikolaus Rath for the report and Chris Lamb for the patch. > + (Closes: #862593) > + > + -- Markus Koschany <apo@debian.org> Fri, 02 Jun 2017 10:29:41 +0200 This looks good to me, feel free to upload. Thanks. KiBi.
Attachment:
signature.asc
Description: Digital signature