I have applied this along with the other amdcf(4) diff you sent, thanks!
On Thu, Sep 03, 2015 at 08:41:25PM -0400, Rob Pierce wrote:
> href tar and cpio?
>
> Index: 58.html
> ===================================================================
> RCS file: /cvs/www/58.html,v
> retrieving revision 1.51
> diff -u -p -r1.51 58.html
> --- 58.html 3 Sep 2015 23:19:55 -0000 1.51
> +++ 58.html 4 Sep 2015 00:39:18 -0000
> @@ -143,7 +143,7 @@ to 5.8.
> <ul>
> <li>sudo in base has been replaced with <a
> href="http://www.openbsd.org/cgi-bin/man.cgi?query=doas&sektion=1">doas(1)</a>,
> sudo is available as a package.
> <li><a
> href="http://www.openbsd.org/cgi-bin/man.cgi?query=file&sektion=1">file(1)</a>
> has been replaced with a new modern implementation, including sandbox and
> privilege separation.
> - <li><a
> href="http://www.openbsd.org/cgi-bin/man.cgi?query=pax&sektion=1">pax(1)</a>
> (and tar(1) and cpio(1)) now prevent archive extraction from escaping the
> current directory via symlinks; <a
> href="http://www.openbsd.org/cgi-bin/man.cgi?query=tar&sektion=1">tar(1)</a>
> without <tt>-P</tt> option now strips up through any "<tt>..</tt>" path
> components.
> + <li><a
> href="http://www.openbsd.org/cgi-bin/man.cgi?query=pax&sektion=1">pax(1)</a>
> (and <a
> href="http://www.openbsd.org/cgi-bin/man.cgi?query=tar&sektion=1">tar(1)</a>
> and <a
> href="http://www.openbsd.org/cgi-bin/man.cgi?query=cpio&sektion=1">cpio(1)</a>)
> now prevent archive extraction from escaping the current directory via
> symlinks; <a
> href="http://www.openbsd.org/cgi-bin/man.cgi?query=tar&sektion=1">tar(1)</a>
> without <tt>-P</tt> option now strips up through any "<tt>..</tt>" path
> components.
> <li>Improved kernel checks of ELF headers.
> <li>... <!-- talk about improved W^X / i386 PAE -->
> </ul>
>