14:44 naddy 

Update to 1.16.  User-visible changes:

Incompatible changes:
* No globbing by default when extracting from or listing an archive.
* -l is now an alias of --check-links

Miscellaneous new options and bug fixes.  For a complete list, see
http://lists.gnu.org/archive/html/bug-tar/2006-10/msg00031.html

20:33 naddy 

Fix build on 4.x.

PR:             94084
Submitted by:   Tod McQuillin <devin@spamcop.net>

14:59 naddy 

Fix a buffer overflow, caused by improper bounds checking of the
PAX extended headers.  By tricking a user into processing a specially
crafted tar archive, this could be exploited to execute arbitrary
code with the privileges of the user.

Security:       CVE-2006-0300
Approved by:    portmgr (erwin)
Obtained from:  Ubuntu