58.html

[Rob Pierce]

href tar and cpio?

Index: 58.html
===================================================================
RCS file: /cvs/www/58.html,v
retrieving revision 1.51
diff -u -p -r1.51 58.html
--- 58.html     3 Sep 2015 23:19:55 -0000       1.51
+++ 58.html     4 Sep 2015 00:39:18 -0000
@@ -143,7 +143,7 @@ to 5.8.
     <ul>
     <li>sudo in base has been replaced with <a 
href="http://www.openbsd.org/cgi-bin/man.cgi?query=doas&amp;sektion=1";>doas(1)</a>,
 sudo is available as a package.
     <li><a 
href="http://www.openbsd.org/cgi-bin/man.cgi?query=file&amp;sektion=1";>file(1)</a>
 has been replaced with a new modern implementation, including sandbox and 
privilege separation.
-    <li><a 
href="http://www.openbsd.org/cgi-bin/man.cgi?query=pax&amp;sektion=1";>pax(1)</a>
 (and tar(1) and cpio(1)) now prevent archive extraction from escaping the 
current directory via symlinks; <a 
href="http://www.openbsd.org/cgi-bin/man.cgi?query=tar&amp;sektion=1";>tar(1)</a>
 without <tt>-P</tt> option now strips up through any "<tt>..</tt>" path 
components.
+    <li><a 
href="http://www.openbsd.org/cgi-bin/man.cgi?query=pax&amp;sektion=1";>pax(1)</a>
 (and <a 
href="http://www.openbsd.org/cgi-bin/man.cgi?query=tar&amp;sektion=1";>tar(1)</a>
 and <a 
href="http://www.openbsd.org/cgi-bin/man.cgi?query=cpio&amp;sektion=1";>cpio(1)</a>)
 now prevent archive extraction from escaping the current directory via 
symlinks; <a 
href="http://www.openbsd.org/cgi-bin/man.cgi?query=tar&amp;sektion=1";>tar(1)</a>
 without <tt>-P</tt> option now strips up through any "<tt>..</tt>" path 
components.
     <li>Improved kernel checks of ELF headers.
     <li>...  <!-- talk about improved W^X / i386 PAE -->
     </ul>