Skip to content

chore(deps): update rust crate tar to v0.4.45#2655

Open
xtqqczze wants to merge 1 commit intomozilla:mainfrom
xtqqczze:deps/tar
Open

chore(deps): update rust crate tar to v0.4.45#2655
xtqqczze wants to merge 1 commit intomozilla:mainfrom
xtqqczze:deps/tar

Conversation

@xtqqczze
Copy link
Copy Markdown
Contributor

@xtqqczze xtqqczze commented Mar 25, 2026

Fix RUSTSEC-2026-0068: tar-rs incorrectly ignores PAX size headers if header size is nonzero
Fix RUSTSEC-2026-0067: unpack_in can chmod arbitrary directories by following symlinks

Closes #2654
Closes #2648

@codecov-commenter
Copy link
Copy Markdown

codecov-commenter commented Mar 25, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 73.37%. Comparing base (f5edaf1) to head (78fd0f5).

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #2655      +/-   ##
==========================================
- Coverage   73.38%   73.37%   -0.02%     
==========================================
  Files          68       68              
  Lines       37340    37340              
==========================================
- Hits        27402    27398       -4     
- Misses       9938     9942       +4     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

RUSTSEC-2026-0068: tar-rs incorrectly ignores PAX size headers if header size is nonzero

2 participants