[Eisfair] Upgrade-Problem (phpmyadmin100)
Holger Bruenjes
holgerbruenjes at gmx.net
Do Jul 30 14:44:46 CEST 2026
Hallo Nelson
Am 30.07.26 um 13:54 schrieb Nelson Matias:
> Hmm ... tar wurde erst im Juli in einem aktualisiertem Paket erneuert.
> Vielleicht liegt es an einer aktualisierten Einstellung beim Bau vom
> tar-binary?
> Die Pakete von tar 3.6.0 und 3.6.2 geben die gleiche Version von tar aus
> (1.35) aber die binaries unterscheiden sich. Leider ist in dem Paket
> kein Changelog drin.
die jeweiligen CVE musst du schon selber nachlesen ;-)
Holger
* Mon Jul 13 2026 Dominique Leuenberger <dimstar at opensuse.org>
- Add tar-acl_-prefix.patch: Avoid acl_ prefix for functions
The acl.h header from libacl uses acl_ prefix for its functions.
Avoid defining functions with the same name in order to protect
its namespace.
* Mon Jun 22 2026 Antonio Teixeira <antonio.teixeira at suse.com>
- Fix CVE-2026-5704.patch causing errors when extracting certain
archives
generated by rpm2archive which contain hard links
- Refresh fix-dereference.patch
* Tue Jun 16 2026 Antonio Teixeira <antonio.teixeira at suse.com>
- Fix tar changing dir permissions temporarily even when using
--no-overwrite-dir
* no-overwrite-dir-fix.patch
- Fix CVE-2026-5704, crafted archives can be used to to hide file
injection
(bsc#1261900)
* CVE-2026-5704.patch
- Fix --dereference/-h not working properly after CVE-2025-45582 fix
(bsc#1265450)
* fix-dereference.patch
- Fix extraction failure for paths like "a/./b" caused by the gnulib
openat2
implementation (bsc#1267189)
* openat2-fix-dotlike-failure.patch
* Thu May 7 2026 Dirk Müller <dmueller at suse.com>
- remove the userspace fallback implementation for openat2
* Tue May 5 2026 Antonio Teixeira <antonio.teixeira at suse.com>
- Fix bsc#1246399 / CVE-2025-45582.
- Add patch:
* CVE-2025-45582.patch
- Refresh patch:
* tar-fix-extract-unlink.patch
* Tue Mar 10 2026 Bernhard Wiedemann <bwiedemann at suse.com>
- Ensure the date in .info files is reproducible (boo#1047218)
* Wed Mar 4 2026 Antonio Teixeira <antonio.teixeira at suse.com>
- Add tar-fix-deletion-from-archive.patch
* Fixes tar creating invalid tarballs when used with --delete
(bsc#1246607)
* Add makeinfo build requirement, needed after the addition of
the patch
Mehr Informationen über die Mailingliste Eisfair