Re: setuid flipping with GNU tar 1.35

2025-05-06 Thread Sergey Poznyakoff
Hi Bowen, Thanks for reporting. I have installed the attached fix. Regards, Sergey >From 807e340ab239146f00f4f440c157b605fdaf1722 Mon Sep 17 00:00:00 2001 From: Sergey Poznyakoff Date: Tue, 6 May 2025 22:25:38 +0300 Subject: [PATCH] Minor fix * src/extract.c (set_mode): Re-stat the file if cu

setuid flipping with GNU tar 1.35

2025-04-17 Thread Bowen Song
Hello, I've discovered an unexpected behaviour when extracting a tar archive file overwriting existing files with the setuid flag, which I believe is a bug in GNU tar. It's reasonable to expect that extracting the same tar file the second time to the same location overwriting existing files