Commit graph

10 commits

Author SHA1 Message Date
wiz
b5f376a210 Update to 5.21o:
CHANGES IN VERSION 5.21o
                 (Howard Chu, 12 Oct 2005)

Silence warnings about unused results.


                        CHANGES IN VERSION 5.21n
                 (Howard Chu, 08 Oct 2005)

Better fix for temporary file creations, previous patch did not fix marc.
Silence all gcc-4.0.0 -Wall warnings.


                        CHANGES IN VERSION 5.21m
                 (Klaus Reimer, 21 Sep 2005)

Applied patch from Joey Schulze fixing the following problems:

  - Fixed insecure permissions of a temporary file [arcsvc.c, CAN-2005-2945]
  - Fixed insecure temporary file creation [arcsvc.c, CAN-2005-2992]



                        CHANGES IN VERSION 5.21l
                 (Klaus Reimer, 13 Mar 2005)

Fixed warnings because missing inclusion of string.h and fixed a gcc-4.0
problem with marc.c (Missing declaration of makefnam).



                        CHANGES IN VERSION 5.21k
                 (Klaus Reimer, 6 Nov 2004)

Ulf Harnhammar found some buffer overflows causing segfaults and provided a
patch which is now applied to arc to close these bugs.



                        CHANGES IN VERSION 5.21


The following changes have been made in ARC version 5.21, but have not
yet been included in the manual:

o   When adding files to an archive, ARC now shows the stowage facter
    achieved on each file.

o   A bug was found that would keep an archive entry from being
    encrypted if it was stored without compression.  This has now been
    fixed.

o   If changes are made to a corrupted archive, the corrupted entries
    are discarded.  This makes it possible to lose data accidentally.
    ARC will now only make changes to a corrupted archive if the W
    (suppress Warnings) option has been given.

o   The N (suppress Notes) option now suppresses the "Creating
    archive" note when a new archive is being created.

o   The N (suppress Notes) option formerly did nothing useful when
    used with the L (List files) command.  It now causes a terse
    listing of filenames only, suitable for use with pipes and
    redirection.

o   The list of filenames given to ARC may now include indirect
    references.  If a filename begins with an "at sign" ("@"), it is
    taken to be the name of a file which contains a list of file
    names.  The list of file names may include further indirection.
    If no extension is given, ".CMD" is assumed.  For example, the
    command:

         arc a waste junk.txt @trash

    would cause ARC to add JUNK.TXT plus all files listed in the file
    TRASH.CMD to an archive named WASTE.ARC.  If no file is specified,
    then the list is read from standard input.  For example, the
    command:

         arc ln waste | arc a trash @

    would cause ARC to add files to TRASH.ARC based on the names of
    the files stored in WASTE.ARC.  It is probably a good idea to give
    the O (Overwrite) option if you are extracting files this way.

    Version 5.21 of MARC also allows for indirection.
2006-05-02 19:06:45 +00:00
salo
24b3135d2d Security fix for CAN-2005-2945 and CAN-2005-2992:
"arc 5.21j and earlier create temporary files with world-readable permissions,
which allows local users to read sensitive information from files created by
arc or marc."

http://www.zataz.net/adviso/arc-09052005.txt
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2945

Patch from Debian.
2005-10-06 14:23:39 +00:00
minskim
d7ea5a8510 Make this package build with gcc-4. 2005-05-08 05:45:42 +00:00
agc
f1a84844c6 Add RMD160 digests in addition to SHA1 ones. 2005-02-23 14:45:22 +00:00
tv
416028dc9d MAke build on Interix. 2005-01-16 16:39:08 +00:00
kristerw
0ec433499a Correct a buffer overflow, using a patch provided by Richard Rauch
in PR pkg/23954.

Bump PKGREVISION.
2005-01-01 11:43:27 +00:00
minskim
ab56bdc82c Make this package build on Linux. Patch provided by Georg Schwarz in
PR pkg/25043.
2004-04-10 23:31:27 +00:00
schmonz
035f65f2e2 Darwinize. Instead of the deprecated timelocal() (which doesn't
exist on Darwin), use mktime() with a negative tm_isdst. Thanks to
christos for comments.
2002-06-10 15:09:16 +00:00
agc
871c5f4103 Move to sha1 digests, and add distfile sizes. 2001-04-18 11:21:02 +00:00
agc
4274f13ce5 + move the distfile digest/checksum value from files/md5 to distinfo
+ move the patch digest/checksum values from files/patch-sum to distinfo
2001-04-17 10:10:18 +00:00