#47422 tar is vulnerable to CVE-2021-20193

Received: (at 47422) by debbugs.gnu.org; 5 Nov 2021 05:14:30 +0000
From debbugs-submit-bounces@debbugs.gnu.org Fri Nov 05 01:14:30 2021
Received: from localhost ([127.0.0.1]:44359 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces@debbugs.gnu.org>)
	id 1mirYc-0001Ol-0x
	for submit@debbugs.gnu.org; Fri, 05 Nov 2021 01:14:30 -0400
Received: from mail-4316.protonmail.ch ([185.70.43.16]:58583)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <phodina@protonmail.com>) id 1mirYW-0001OT-V1
 for 47422@debbugs.gnu.org; Fri, 05 Nov 2021 01:14:28 -0400
Date: Fri, 05 Nov 2021 05:14:13 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=protonmail.com;
 s=protonmail; t=1636089258;
 bh=HzE1zJJI5axoAGhOvzmR92ZxN8Jj5AOG9j4LUHhxDsk=;
 h=Date:To:From:Reply-To:Subject:From;
 b=mgBthmrsi81IkDEHdt6DMyJOxNYmLDmFqG6kfZJe5ZHB8yQHjPbubQkQST+wE5A3D
 NGO/suQBrTjziOIUMrbenL+kbBEEUfIeg2VprLqKIoPFH0243nsQt4tFJePAtG8tGo
 PNZ6B28ceHCJTIGmhAIYhkSlKQbZHlcXJeJVXjsg=
To: "47422@debbugs.gnu.org" <47422@debbugs.gnu.org>
From: phodina <phodina@protonmail.com>
Subject: RE: tar is vulnerable to CVE-2021-20193
Message-ID: <ysdJZxCdgMKsc9Tq-LKYLg_OgwwdXBljXBYTzfupOKMOshTTI34ijmXx0D8acxWF7OYW9NFXOLFLOVuV-NT-T3IyIjxCU0RboaItON_XjFY=@protonmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: No, score=-1.2 required=10.0 tests=ALL_TRUSTED,DKIM_SIGNED,
 DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_FROM shortcircuit=no
 autolearn=disabled version=3.4.4
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on
 mailout.protonmail.ch
X-Spam-Score: 1.3 (+)
X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 Content preview:  Hi, here's patch for the master branch as I'm not sure what
 is the roadmap for merging core-updates into master. The obvious downside
 is that the update triggers large rebuild of core packages :-/ 
 Content analysis details:   (1.3 points, 10.0 required)
 pts rule name              description
 ---- ---------------------- --------------------------------------------------
 -0.0 RCVD_IN_MSPIKE_H4      RBL: Very Good reputation (+4)
 [185.70.43.16 listed in wl.mailspike.net]
 0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail
 provider (phodina[at]protonmail.com)
 0.0 T_SPF_TEMPERROR        SPF: test of record failed (temperror)
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
 -0.0 RCVD_IN_MSPIKE_WL      Mailspike good senders
 1.3 SPOOFED_FREEMAIL       No description available.
X-Debbugs-Envelope-To: 47422
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit@debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request@debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=subscribe>
Reply-To: phodina <phodina@protonmail.com>
Errors-To: debbugs-submit-bounces@debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces@debbugs.gnu.org>
X-Spam-Score: -1.0 (-)