diff --git a/gnome-autoar-0.3.0.tar.xz b/gnome-autoar-0.3.0.tar.xz deleted file mode 100644 index dbc3d52..0000000 --- a/gnome-autoar-0.3.0.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:f2c112c0120cca2bf5a82c5b0ac8cba90ce10d21fec78f50a3bc513fdd64586b -size 297072 diff --git a/gnome-autoar-0.3.1.tar.xz b/gnome-autoar-0.3.1.tar.xz new file mode 100644 index 0000000..3a58998 --- /dev/null +++ b/gnome-autoar-0.3.1.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:0e78713e6f0de339fdee16bab82753ae290fe80fa7b4ba6e3db8c1465b81d0f8 +size 297904 diff --git a/gnome-autoar.changes b/gnome-autoar.changes index ce983e5..ee01b0b 100644 --- a/gnome-autoar.changes +++ b/gnome-autoar.changes @@ -1,3 +1,12 @@ +------------------------------------------------------------------- +Wed Apr 14 00:40:44 UTC 2021 - Ferdinand Thiessen + +- Update to version 0.3.1: + + Disallow symlinks in parents completely when extracting + ( CVE-2021-28650 ) + + Drop recursive delete on failure to prevent data loss + + Add back RAR support + ------------------------------------------------------------------- Fri Feb 12 17:19:47 UTC 2021 - Bjørn Lie diff --git a/gnome-autoar.spec b/gnome-autoar.spec index 4a374a7..0e3bf2c 100644 --- a/gnome-autoar.spec +++ b/gnome-autoar.spec @@ -17,7 +17,7 @@ Name: gnome-autoar -Version: 0.3.0 +Version: 0.3.1 Release: 0 Summary: Automatic archives creating and extracting library License: LGPL-2.0-or-later