Patch to fix a directory traversal vulnerability, #189682

  thanks to Robert Buchholz.
(Portage version: 2.1.3.6)
 (Unsigned Manifest commit)

1 files changed, 22 insertions, 4 deletions

diff --git a/app-arch/tar/Manifest b/app-arch/tar/Manifest
index ccd7e3f823a9..935d5d6e7a20 100644
--- a/app-arch/tar/Manifest
+++ b/app-arch/tar/Manifest
@@ -10,6 +10,10 @@ AUX rmt 273 RMD160 18f5fac369cc3372af7bd83384bb437a67baaa44 SHA1 971081167d145e4
 MD5 38de71f12e9b0b3a5a5083f420e812bd files/rmt 273
 RMD160 18f5fac369cc3372af7bd83384bb437a67baaa44 files/rmt 273
 SHA256 8de946561fc5fe3603627c78c9777dc1f7bad7926171822f3a25958a6cd3be55 files/rmt 273
+AUX tar-1.15.1-alt-contains-dot-dot.patch 531 RMD160 ea2c3d75c0821c43312650694be71aca1ea4807b SHA1 85011e648a365236fc4c3215645984f0f25ee92e SHA256 50c116a76624ffdb41d92bd1cf6cc5a08e860ad43aec1aed5f8319d191f566a6
+MD5 66123ac05bd7cdc8791e35480d6870c9 files/tar-1.15.1-alt-contains-dot-dot.patch 531
+RMD160 ea2c3d75c0821c43312650694be71aca1ea4807b files/tar-1.15.1-alt-contains-dot-dot.patch 531
+SHA256 50c116a76624ffdb41d92bd1cf6cc5a08e860ad43aec1aed5f8319d191f566a6 files/tar-1.15.1-alt-contains-dot-dot.patch 531
 AUX tar-1.15.1-dont-abort-long-names.patch 1586 RMD160 3c13978030c20830996fd56ddeb3f95024c23530 SHA1 d7ab5b32a957621d1ca358f6ea9931be907e2dc1 SHA256 049132675793b924a581fcf025c449bff03b29b754f1eda85cbf30a0b962daa7
 MD5 6c645ac1da5d382a9f7ca85729b7e9e9 files/tar-1.15.1-dont-abort-long-names.patch 1586
 RMD160 3c13978030c20830996fd56ddeb3f95024c23530 files/tar-1.15.1-dont-abort-long-names.patch 1586
@@ -54,6 +58,10 @@ EBUILD tar-1.16.1.ebuild 1647 RMD160 037df97a39b885f8a54fcc922e86a1270b2f8d69 SH
 MD5 56680a1691fde6784cb08cedb7c0f99a tar-1.16.1.ebuild 1647
 RMD160 037df97a39b885f8a54fcc922e86a1270b2f8d69 tar-1.16.1.ebuild 1647
 SHA256 56656c80be0193290c67d4d7464247e79bc5b096212ce849796ba5cf4beea4dd tar-1.16.1.ebuild 1647
+EBUILD tar-1.17-r1.ebuild 1778 RMD160 aaffa3b141b912c568f0846505b59ca4caafcb82 SHA1 cdfd3dc89c26a72c106b34cb3b445cf424785e1e SHA256 55069d29aa22c99e5f3d83051830432d88c7f3f1327285f189770274d80959b4
+MD5 35198272aa477c8c858694e6807513da tar-1.17-r1.ebuild 1778
+RMD160 aaffa3b141b912c568f0846505b59ca4caafcb82 tar-1.17-r1.ebuild 1778
+SHA256 55069d29aa22c99e5f3d83051830432d88c7f3f1327285f189770274d80959b4 tar-1.17-r1.ebuild 1778
 EBUILD tar-1.17.ebuild 1691 RMD160 6889ffbd7a9ddff434ffd0896a36eb0f30f3ea07 SHA1 062587b357b1ea740acd8003febfad766ee1b865 SHA256 338487e83892d86c60c8ef05b6f9ed089649029a97e9a72a1a8913da1d11029e
 MD5 f7d3f6fffcd67b1a9d78027f702bab55 tar-1.17.ebuild 1691
 RMD160 6889ffbd7a9ddff434ffd0896a36eb0f30f3ea07 tar-1.17.ebuild 1691
@@ -62,10 +70,14 @@ EBUILD tar-1.18-r1.ebuild 1649 RMD160 a59b4fb0a71e7a4b69c868715e7d10a3c6f486cd S
 MD5 9f7899d2100fa7c9847b77d7557f6fb3 tar-1.18-r1.ebuild 1649
 RMD160 a59b4fb0a71e7a4b69c868715e7d10a3c6f486cd tar-1.18-r1.ebuild 1649
 SHA256 2d96054ad397afe36116c11992883446625eb5cb0c5291e565205b11ed94603a tar-1.18-r1.ebuild 1649
-MISC ChangeLog 17044 RMD160 6e942eb886234e0f8bc50f5a5f90cee4b5391112 SHA1 e452c933f213c6d6ec4ecaf56d0804de92e4a399 SHA256 ae55e7ced632c5c1ca973b115f73d6b8c94d7a0ef3d625a22cfa317c464dc056
-MD5 2bcffc7d34d5449d12641c52fbfb3ab7 ChangeLog 17044
-RMD160 6e942eb886234e0f8bc50f5a5f90cee4b5391112 ChangeLog 17044
-SHA256 ae55e7ced632c5c1ca973b115f73d6b8c94d7a0ef3d625a22cfa317c464dc056 ChangeLog 17044
+EBUILD tar-1.18-r2.ebuild 1732 RMD160 60fa9342483aba3c427332965da018d12f9c71df SHA1 f3fb535935cf44d9be4fcb378d376d9595e96930 SHA256 007a1aaa46e34b116f5e2e2b4f13074fcbcf80d247f6108727043cc9a0f739d7
+MD5 dbc3c4c1c49d416b0ca172c0d061657c tar-1.18-r2.ebuild 1732
+RMD160 60fa9342483aba3c427332965da018d12f9c71df tar-1.18-r2.ebuild 1732
+SHA256 007a1aaa46e34b116f5e2e2b4f13074fcbcf80d247f6108727043cc9a0f739d7 tar-1.18-r2.ebuild 1732
+MISC ChangeLog 17335 RMD160 64edb43a033bebe4eb407a24a595df866f2e60e9 SHA1 14caf4c80c9109d14dc6a76ee1ebbcc4c6c2368d SHA256 b31a19e8e0fe630a4b064dc74a3db6b0a6607c68249b617a014dd99f9287d92d
+MD5 188d34c8e972658f40971da6fbc5793c ChangeLog 17335
+RMD160 64edb43a033bebe4eb407a24a595df866f2e60e9 ChangeLog 17335
+SHA256 b31a19e8e0fe630a4b064dc74a3db6b0a6607c68249b617a014dd99f9287d92d ChangeLog 17335
 MISC metadata.xml 164 RMD160 f43cbec30b7074319087c9acffdb9354b17b0db3 SHA1 9c213f5803676c56439df3716be07d6692588856 SHA256 f5f2891f2a4791cd31350bb2bb572131ad7235cd0eeb124c9912c187ac10ce92
 MD5 9a09f8d531c582e78977dbfd96edc1f2 metadata.xml 164
 RMD160 f43cbec30b7074319087c9acffdb9354b17b0db3 metadata.xml 164
@@ -79,6 +91,12 @@ SHA256 779d91a741a2e1e16f26de90c2c25b1c38aeb9132ca71b2a7ab974a436163bc2 files/di
 MD5 76fd4387f46d6edc1f7e4771411354af files/digest-tar-1.17 232
 RMD160 9369888ef973870b88e47e67102ecdf01e2a18d6 files/digest-tar-1.17 232
 SHA256 f569c6950e4c0779c8ae9499a1023460a561e61b1f6531a7462448b3d6487186 files/digest-tar-1.17 232
+MD5 76fd4387f46d6edc1f7e4771411354af files/digest-tar-1.17-r1 232
+RMD160 9369888ef973870b88e47e67102ecdf01e2a18d6 files/digest-tar-1.17-r1 232
+SHA256 f569c6950e4c0779c8ae9499a1023460a561e61b1f6531a7462448b3d6487186 files/digest-tar-1.17-r1 232
 MD5 2a4c2cef33202b7c83c4a87f32512b5b files/digest-tar-1.18-r1 232
 RMD160 59528176381f24905dedc2f69cd1bf0cebfcb765 files/digest-tar-1.18-r1 232
 SHA256 a51da4b71a4e3ead5181f8d00573d01e876cc22461033318932e9462ce85fc9a files/digest-tar-1.18-r1 232
+MD5 2a4c2cef33202b7c83c4a87f32512b5b files/digest-tar-1.18-r2 232
+RMD160 59528176381f24905dedc2f69cd1bf0cebfcb765 files/digest-tar-1.18-r2 232
+SHA256 a51da4b71a4e3ead5181f8d00573d01e876cc22461033318932e9462ce85fc9a files/digest-tar-1.18-r2 232