+++ This bug was initially created as a clone of Bug #606813 +++ Description of problem: The perl-Archive-Tar's Archive::Tar->extract_archive() returns true even if its operation fails: If I do something like this: #!/usr/bin/perl use Archive::Tar; local $Archive::Tar::DEBUG = 0; local $Archive::Tar::INSECURE_EXTRACT_MODE = 0; exit 1 if (!Archive::Tar->extract_archive('some-unexisting-file.tar', 0)); then the script exits with status 1, which is right, because some-unexisting-file.tar does not exist. But when I do something like #!/usr/bin/perl use Archive::Tar; local $Archive::Tar::DEBUG = 0; local $Archive::Tar::INSECURE_EXTRACT_MODE = 0; exit 1 if (!Archive::Tar->extract_archive('rep-sym-abspath.tar', 0)); where $ tar tvf rep-sym-abspath.tar lrwxrwxrwx 0/0 0 2007-09-12 10:59 dir -> /tmp -rw------- 0/0 4 2007-09-12 10:59 dir/bar then I got error message "...not allowed under SECURE EXTRACT MODE..." which is right (see [1] for more info) but the script ends up with zero exit code. Which is IMHO bad. -------- Proposed solution: https://bugzilla.redhat.com/attachment.cgi?id=426194 Upstream report: https://rt.cpan.org/Public/Bug/Display.html?id=58636
F12, F13, F14 affected.
F12 and F13 will get new perl packge revision with bundled Archive-Tar-1.62, F14 will be covered by separate perl-Archive-Tar-1.62 package (devel branch CVS request in bug #226239).
perl-5.10.0-90.fc12 has been submitted as an update for Fedora 12. http://admin.fedoraproject.org/updates/perl-5.10.0-90.fc12
perl-5.10.1-114.fc13 has been submitted as an update for Fedora 13. http://admin.fedoraproject.org/updates/perl-5.10.1-114.fc13
perl-5.10.0-90.fc12 has been pushed to the Fedora 12 testing repository. If problems still persist, please make note of it in this bug report. If you want to test the update, you can install it with su -c 'yum --enablerepo=updates-testing update perl'. You can provide feedback for this update here: http://admin.fedoraproject.org/updates/perl-5.10.0-90.fc12
perl-5.10.1-114.fc13 has been pushed to the Fedora 13 testing repository. If problems still persist, please make note of it in this bug report. If you want to test the update, you can install it with su -c 'yum --enablerepo=updates-testing update perl'. You can provide feedback for this update here: http://admin.fedoraproject.org/updates/perl-5.10.1-114.fc13
F14 fixed by upgrading perl-Archive-Tar to 1.62-1.fc14.
perl-5.10.1-114.fc13 has been pushed to the Fedora 13 stable repository. If problems still persist, please make note of it in this bug report.