Your message dated Fri, 30 Jun 2017 02:47:38 +0000
with message-id <e1dqly6-000hlv...@fasolo.debian.org>
and subject line Bug#862593: fixed in xarchiver 1:0.5.4-1+deb8u2
has caused the Debian Bug report #862593,
regarding xarchiver: Adding files to .tar.xz deletes existing content
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
862593: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=862593
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: xarchiver
Version: 1:0.5.4-1+deb8u1
Severity: critical
Justification: causes serious data loss

As far as I can tell, using xarchiver to add additional files to a
.tar.xz file will destroy the existing data.

Steps to reproduce:

$ echo foo > "Kieran Daycare Contract.pdf"
$ echo bar > "Kieran Daycare 2.pdf"
$ tar cJvf "Kieran Daycare Contract.pdf.tar.xz" "Kieran Daycare Contract.pdf"
Kieran Daycare Contract.pdf

$ xarchiver Kieran\ Daycare\ Contract.pdf.tar.xz 
# Select Action->Add
# Select the "bar.txt" file

Now the existing file is gone, and only the new file is
in the archive.

Please note that the filename seems to matter, I wasn't able
to recreate this when using "foo.txt", "bar.txt" and "test.tar.xz".

-- System Information:
Debian Release: 8.8
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.9.0-0.bpo.2-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages xarchiver depends on:
ii  libc6               2.19-18+deb8u9
ii  libgdk-pixbuf2.0-0  2.31.1-2+deb8u5
ii  libglib2.0-0        2.48.0-1~bpo8+1
ii  libgtk2.0-0         2.24.25-3+deb8u1
ii  libpango-1.0-0      1.36.8-3

Versions of packages xarchiver recommends:
ii  bzip2       1.0.6-7+b3
ii  p7zip-full  9.20.1~dfsg.1-4.1+deb8u2
ii  unzip       6.0-16+deb8u3
ii  xdg-utils   1.1.0~rc1+git20111210-7.4
ii  xz-utils    5.1.1alpha+20120614-2+b3

Versions of packages xarchiver suggests:
pn  arj    <none>
pn  lhasa  <none>
pn  rar    <none>
pn  rpm    <none>
pn  unar   <none>
ii  zip    3.0-8

-- no debconf information

--- End Message ---
--- Begin Message ---
Source: xarchiver
Source-Version: 1:0.5.4-1+deb8u2

We believe that the bug you reported is fixed in the latest version of
xarchiver, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 862...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Markus Koschany <a...@debian.org> (supplier of updated xarchiver package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 29 Jun 2017 14:09:33 +0200
Source: xarchiver
Binary: xarchiver xarchiver-dbg
Architecture: source amd64
Version: 1:0.5.4-1+deb8u2
Distribution: jessie
Urgency: medium
Maintainer: Markus Koschany <a...@gambaru.de>
Changed-By: Markus Koschany <a...@debian.org>
Description:
 xarchiver  - GTK+ frontend for most used compression formats
 xarchiver-dbg - debugging symbols for xarchiver
Closes: 862593
Changes:
 xarchiver (1:0.5.4-1+deb8u2) jessie; urgency=medium
 .
   [ Chris Lamb ]
   * Fix data-loss issue where adding files to a tar-based archive removed all
     existing content when the target filename included shell metacharacters.
     The test to see whether it already existed to determine whether to create
     a new archive or simply add a new file incorrectly used an escaped path.
     Thanks to Nikolaus Rath for the report and Chris Lamb for the patch.
     (Closes: #862593)
Checksums-Sha1:
 76e26f9023807aba47a0eee3c94cbe806f39af02 2131 xarchiver_0.5.4-1+deb8u2.dsc
 a429cf7a4ef4690d11086e49308a1d381ef5f83b 11816 
xarchiver_0.5.4-1+deb8u2.debian.tar.xz
 e39b33cd4840ae8af503d3dfd4558e5e5a11e735 445712 
xarchiver_0.5.4-1+deb8u2_amd64.deb
 9e8cf1f38fc6710bcc219d1f6a1acd26435a6d06 401056 
xarchiver-dbg_0.5.4-1+deb8u2_amd64.deb
Checksums-Sha256:
 ff8f0d2f2b7940bd6939601eced2cbc193a6842f181163fe7285f0ae12e95daf 2131 
xarchiver_0.5.4-1+deb8u2.dsc
 b6e5446357f61fb20884c3e0b5225a39d002cf75cfa2e2a35044f79d7a4ff1c8 11816 
xarchiver_0.5.4-1+deb8u2.debian.tar.xz
 6360485a15705b8e5beb3b0a8befc447039e0ddcf9f1aff8b3ff3c93cced8fb0 445712 
xarchiver_0.5.4-1+deb8u2_amd64.deb
 5054734f430863083873a6f8cd66d2dfa63d17697c78c7a73c0eb06337b3254a 401056 
xarchiver-dbg_0.5.4-1+deb8u2_amd64.deb
Files:
 8aac8601a7294cca5f3b0966c8e6b9fb 2131 x11 optional xarchiver_0.5.4-1+deb8u2.dsc
 8ceea53f20b523808c9f9d5d9e6bf965 11816 x11 optional 
xarchiver_0.5.4-1+deb8u2.debian.tar.xz
 cded87b14d29f7a5e6534afd5e1aa5a4 445712 x11 optional 
xarchiver_0.5.4-1+deb8u2_amd64.deb
 819a6dc380dcfc6a8db18a7fa712ba43 401056 debug extra 
xarchiver-dbg_0.5.4-1+deb8u2_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=XNrb
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to