Number of commits found: 3

Update to 1.16.  User-visible changes:

Incompatible changes:
* No globbing by default when extracting from or listing an archive.
* -l is now an alias of --check-links

Miscellaneous new options and bug fixes.  For a complete list, see
http://lists.gnu.org/archive/html/bug-tar/2006-10/msg00031.html

Fix build on 4.x.

PR:             94084
Submitted by:   Tod McQuillin <devin@spamcop.net>

Fix a buffer overflow, caused by improper bounds checking of the
PAX extended headers.  By tricking a user into processing a specially
crafted tar archive, this could be exploited to execute arbitrary
code with the privileges of the user.

Security:       CVE-2006-0300
Approved by:    portmgr (erwin)
Obtained from:  Ubuntu

Number of commits found: 3

12 vulnerabilities affecting 16 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities