Package: xarchiver Version: 1:0.5.4-1+deb8u1 Severity: critical Justification: causes serious data loss
As far as I can tell, using xarchiver to add additional files to a .tar.xz file will destroy the existing data. Steps to reproduce: $ echo foo > "Kieran Daycare Contract.pdf" $ echo bar > "Kieran Daycare 2.pdf" $ tar cJvf "Kieran Daycare Contract.pdf.tar.xz" "Kieran Daycare Contract.pdf" Kieran Daycare Contract.pdf $ xarchiver Kieran\ Daycare\ Contract.pdf.tar.xz # Select Action->Add # Select the "bar.txt" file Now the existing file is gone, and only the new file is in the archive. Please note that the filename seems to matter, I wasn't able to recreate this when using "foo.txt", "bar.txt" and "test.tar.xz". -- System Information: Debian Release: 8.8 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.9.0-0.bpo.2-amd64 (SMP w/8 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages xarchiver depends on: ii libc6 2.19-18+deb8u9 ii libgdk-pixbuf2.0-0 2.31.1-2+deb8u5 ii libglib2.0-0 2.48.0-1~bpo8+1 ii libgtk2.0-0 2.24.25-3+deb8u1 ii libpango-1.0-0 1.36.8-3 Versions of packages xarchiver recommends: ii bzip2 1.0.6-7+b3 ii p7zip-full 9.20.1~dfsg.1-4.1+deb8u2 ii unzip 6.0-16+deb8u3 ii xdg-utils 1.1.0~rc1+git20111210-7.4 ii xz-utils 5.1.1alpha+20120614-2+b3 Versions of packages xarchiver suggests: pn arj <none> pn lhasa <none> pn rar <none> pn rpm <none> pn unar <none> ii zip 3.0-8 -- no debconf information
