[Eisfair] Upgrade-Problem (phpmyadmin100)

Holger Bruenjes holgerbruenjes at gmx.net
Do Jul 30 14:44:46 CEST 2026


Hallo Nelson

Am 30.07.26 um 13:54 schrieb Nelson Matias:

> Hmm ... tar wurde erst im Juli in einem aktualisiertem Paket erneuert.
> Vielleicht liegt es an einer aktualisierten Einstellung beim Bau vom
> tar-binary?
> Die Pakete von tar 3.6.0 und 3.6.2 geben die gleiche Version von tar aus
> (1.35) aber die binaries unterscheiden sich. Leider ist in dem Paket
> kein Changelog drin.


die jeweiligen CVE musst du schon selber nachlesen ;-)

Holger


* Mon Jul 13 2026 Dominique Leuenberger <dimstar at opensuse.org>
- Add tar-acl_-prefix.patch: Avoid acl_ prefix for functions
   The acl.h header from libacl uses acl_ prefix for its functions.
   Avoid defining functions with the same name in order to protect
   its namespace.
* Mon Jun 22 2026 Antonio Teixeira <antonio.teixeira at suse.com>
- Fix CVE-2026-5704.patch causing errors when extracting certain 
archives
   generated by rpm2archive which contain hard links
- Refresh fix-dereference.patch
* Tue Jun 16 2026 Antonio Teixeira <antonio.teixeira at suse.com>
- Fix tar changing dir permissions temporarily even when using 
--no-overwrite-dir
   * no-overwrite-dir-fix.patch
- Fix CVE-2026-5704, crafted archives can be used to to hide file 
injection
   (bsc#1261900)
   * CVE-2026-5704.patch
- Fix --dereference/-h not working properly after CVE-2025-45582 fix 
(bsc#1265450)
   * fix-dereference.patch
- Fix extraction failure for paths like "a/./b" caused by the gnulib 
openat2
   implementation (bsc#1267189)
   * openat2-fix-dotlike-failure.patch
* Thu May  7 2026 Dirk Müller <dmueller at suse.com>
- remove the userspace fallback implementation for openat2
* Tue May  5 2026 Antonio Teixeira <antonio.teixeira at suse.com>
- Fix bsc#1246399 / CVE-2025-45582.
- Add patch:
   * CVE-2025-45582.patch
- Refresh patch:
   * tar-fix-extract-unlink.patch
* Tue Mar 10 2026 Bernhard Wiedemann <bwiedemann at suse.com>
- Ensure the date in .info files is reproducible (boo#1047218)
* Wed Mar  4 2026 Antonio Teixeira <antonio.teixeira at suse.com>
- Add tar-fix-deletion-from-archive.patch
   * Fixes tar creating invalid tarballs when used with --delete 
(bsc#1246607)
   * Add makeinfo build requirement, needed after the addition of 
the patch



Mehr Informationen über die Mailingliste Eisfair