Re: CVS commit: pkgsrc/archivers/gtar-base

[Tobias Nygren <tnn%NetBSD.org@localhost>]

On Mon, 31 Mar 2008 00:39:38 +0000 (UTC)
Tonnerre Lombard <tonnerre%netbsd.org@localhost> wrote:

> 
> Module Name:  pkgsrc
> Committed By: tonnerre
> Date:         Mon Mar 31 00:39:38 UTC 2008
> 
> Modified Files:
>       pkgsrc/archivers/gtar-base: Makefile distinfo
> Added Files:
>       pkgsrc/archivers/gtar-base/patches: patch-ak
> 
> Log Message:
> Add patch for gtar-base to fix a directory traversal vulnerability
> (CVE-2007-4131, pkgsrc-sec ticket #15481)
> Approved-by: joerg

Hello,

I don't know if it's related or not, but today I get gtar processes
spinning at 100% CPU in my bulk build. There may be a problem with this
patch.

Kind regards,
-Tobias