Skip to content

Releases: pear/Archive_Tar

1.5.0

16 Mar 16:23
b439c85
Compare
Choose a tag to compare
  • PR #42: fix @return true... to @return bool true... on some functions
  • PR #46: use 775 default for mkdirs, to avoid world-write

1.4.14

20 Jul 19:37
4d761c5
Compare
Choose a tag to compare

Properly fix symbolic link path traversal (CVE-2021-32610)

1.4.13

16 Feb 10:52
2b87b41
Compare
Choose a tag to compare

Fixes #35 - Relative symlinks failing (out-of path file extraction)

1.4.10

15 Sep 14:14
bbb4f10
Compare
Choose a tag to compare
  • Fix block padding when the file buffer length is a multiple of 512 and smaller than Archive_Tar buffer length
  • Don't try to copy username/groupname in chroot jail

1.4.9

04 Dec 12:14
c5b0005
Compare
Choose a tag to compare

Implement Feature #23861: Add option to disallow symlinks [mrook]

1.4.8

21 Oct 13:37
442bdff
Compare
Choose a tag to compare
  • Fix Bug #23852: PHP 7.4 - Archive_Tar->_readHeader throws deprecation [mrook]

1.4.7

08 Apr 13:17
7e48add
Compare
Choose a tag to compare
  • Improved performance by increasing read buffer size

1.4.6

01 Feb 11:11
b8e33f9
Compare
Choose a tag to compare
  • Improve path traversal detection for forward and backward slashes

1.4.5

01 Feb 10:51
ff716ca
Compare
Choose a tag to compare
  • Fix Bug #23788: Relative symlinks are broken [mrook]

1.4.4

20 Dec 22:25
b005152
Compare
Choose a tag to compare
  • Fix Bug #21058: Long symlinks are not supported [mrook]
  • Fix Bug #23782: Prevent phar:// files from being extracted [mrook]