---
- branch: MAIN
  date: Wed Nov  5 15:48:45 UTC 2008
  files:
  - new: '1.31'
    old: '1.30'
    path: pkgsrc/archivers/p5-Archive-Tar/Makefile
    pathrev: pkgsrc/archivers/p5-Archive-Tar/Makefile@1.31
    type: modified
  - new: '1.3'
    old: '0'
    path: pkgsrc/archivers/p5-Archive-Tar/PLIST
    pathrev: pkgsrc/archivers/p5-Archive-Tar/PLIST@1.3
    type: added
  - new: '1.15'
    old: '1.14'
    path: pkgsrc/archivers/p5-Archive-Tar/distinfo
    pathrev: pkgsrc/archivers/p5-Archive-Tar/distinfo@1.15
    type: modified
  id: 20081105T154845Z.fdd3976eb4495d0021f58f363d5fb0f29c569c49
  log: |
    Update to 1.40.
    XXX: Automatic handling and plain entries don't work for symlinks
    for ptar and ptardiff, no idea why.  Added PLIST entries like the following
    for this reason:
    @unexec ${RM} -f %D/bin/ptar 2>/dev/null || ${TRUE}

    * important changes in version 1.40 13/10/2008:
    - Add $class->has_zlib_support and $class->has_bzip2_support to
      discern which A::T can support
    - Address: #39933: [PATCH] handle ../ directory name on VMS (core patch)

    * important changes in version 1.39_04 08/09/2008:
    - Address: #38932: pax_global_header extracted as file
      Don't extract these special files, which are added by, among
      others, git-generated tarballs. It holds a comment and is not
      meant for extraction. This follows gnu tar 1.14 and later behaviour
    - Address: #19577: extract_file() drops volume part of extraction path
      Windows users can now extract files to a different volume

    * important changes in verison 1.39_03 26/08/2008:
    - Because all the IO::Compress modules are interlinked, they must be
      the same version when installed, or breakage will occur like shown
      at this tester report:

        http://www.nntp.perl.org/group/perl.cpan.testers/2008/08/msg2083310.html

      Mailed the author to find a less fragile solution, but for now we require
      all the individual modules, and all at the same version.

    * important changes in version 1.39_02 25/08/2008:
    - Address #31806: Please add support for bzipped tar files.
      Archive::Tar now supports reading/writing tar.bz2 files.
    - Since IO::Zlib is now core, it is now a default dependency.
    - Added Package::Constants as a dependency to ease the use of A::T::Constants
    - Dependency on IO::Compress::Bzip2 and IO::Uncompress::Bunzip2 is on
      by default, but can be negated with the -n switch when building:
      'perl Makefile.PL -n'
    - Improve documentation on the new ->iter function

    * important changes in version 1.39_01 22/08/2008:
    - Address the second part mentioned in this report:
      #30380: directory traversal vulnerability in Archive-Tar
      Archives are no longer allowed to extract into symlinked directories,
      unless Insecure Extract Mode is enabled (which is off by default).
    - Add regression tests for this behaviour
    - Address #33669 (Could not update timestamp warning on symlinks)
      Don't update timestamps on symlinks, they'll modify the original
    - Apply core patch: [patch@33971] Archive::Tar was building corrupt
      archives on VMS as supplied by John Malmberg
    - Address #37375: ptar should allow '-' as an archive_file name
      Patch provided by glenn jackman
    - Add convenience method ->extract() to A::T::File
    - improve docs of A::T::File by adding rv & object in the header
    - Address #38580: [PATCH] Archive::Tar->iter
      This adds an iterator to Archive::Tar, thanks to Gisle Aas
  module: pkgsrc
  subject: 'CVS commit: pkgsrc/archivers/p5-Archive-Tar'
  unixtime: '1225900125'
  user: wiz