Greetings,
attached is the patch to update Archive::Tar to 1.40. The patch
is against bleadperl, and passes its tests on my development box.
Here's the changes entry since 1.38, which is the version that shipped
with perl 5.10:
* important changes in version 1.40 13/10/2008:
- Add $class->has_zlib_support and $class->has_bzip2_support to
discern which A::T can support
- Address: #39933: [PATCH] handle ../ directory name on VMS (core patch)
* important changes in version 1.39_04 08/09/2008:
- Address: #38932: pax_global_header extracted as file
Don't extract these special files, which are added by, among
others, git-generated tarballs. It holds a comment and is not
meant for extraction. This follows gnu tar 1.14 and later behaviour
- Address: #19577: extract_file() drops volume part of extraction path
Windows users can now extract files to a different volume
* important changes in verison 1.39_03 26/08/2008:
- Because all the IO::Compress modules are interlinked, they must be
the same version when installed, or breakage will occur like shown
at this tester report:
http://www.nntp.perl.org/group/perl.cpan.testers/2008/08/
msg2083310.html
Mailed the author to find a less fragile solution, but for now we
require
all the individual modules, and all at the same version.
* important changes in version 1.39_02 25/08/2008:
- Address #31806: Please add support for bzipped tar files.
Archive::Tar now supports reading/writing tar.bz2 files.
- Since IO::Zlib is now core, it is now a default dependency.
- Added Package::Constants as a dependency to ease the use of
A::T::Constants
- Dependency on IO::Compress::Bzip2 and IO::Uncompress::Bunzip2 is on
by default, but can be negated with the -n switch when building:
'perl Makefile.PL -n'
- Improve documentation on the new ->iter function
* important changes in version 1.39_01 22/08/2008:
- Address the second part mentioned in this report:
#30380: directory traversal vulnerability in Archive-Tar
Archives are no longer allowed to extract into symlinked directories,
unless Insecure Extract Mode is enabled (which is off by default).
- Add regression tests for this behaviour
- Address #33669 (Could not update timestamp warning on symlinks)
Don't update timestamps on symlinks, they'll modify the original
- Apply core patch: [patch@33971] Archive::Tar was building corrupt
archives on VMS as supplied by John Malmberg
- Address #37375: ptar should allow '-' as an archive_file name
Patch provided by glenn jackman
- Add convenience method ->extract() to A::T::File
- improve docs of A::T::File by adding rv & object in the header
- Address #38580: [PATCH] Archive::Tar->iter
This adds an iterator to Archive::Tar, thanks to Gisle Aas
--
Jos Boumans http://www.linkedin.com/in/josboumans
How do I prove I'm not crazy to people who are?
perl-current-archive-tar-new.patch