overlay

commit: 0e07bb58d14eef46ed69513731ce686b92c373b6
parent 306d0edbbe67b528560550440ec9ab8e30ef0493
Author: Haelwenn (lanodan) Monnier <contact@hacktivis.me>
Date:   Tue,  8 Aug 2023 09:54:19 +0200

profiles/base: Mask GNU tar due to rsh(1) concerns

Diffstat:
M
profiles/base/package.mask
4
++++

1 file changed, 4 insertions(+), 0 deletions(-)
diff --git a/profiles/base/package.mask b/profiles/base/package.mask
@@ -1,3 +1,7 @@
+# Haelwenn (lanodan) Monnier <contact@hacktivis.me> (2023-08-08)
+# https://www.roguelazer.com/blog/surprising-behavior-in-gnu-tar/
+app-arch/tar
+
 # Haelwenn (lanodan) Monnier <contact@hacktivis.me> (2023-07-25)
 # Dead upstream, known vulnerabilities (CVE-2021-42260)
 # Author switched to tinyxml2