* NEWS: Remove support for mangled names.

[chaz/tar] / NEWS

diff --git a/NEWS b/NEWS
index deb3baf246ea6b85ac7de95b0a3329cd353dfeee..47ef203a0b7c2f1b90c396eed0af43f36ce87cd1 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -1,6 +1,14 @@
 GNU tar NEWS - User visible changes.
 Please send GNU tar bug reports to <bug-tar@gnu.org>
 \f
+* Support for reading ustar type 'N' header logical records has been removed.
+  This GNU extension was generated only by very old versions of GNU 'tar'.
+  Unfortunately its implementation had security holes; see
+  <http://archives.neohapsis.com/archives/fulldisclosure/2006-11/0344.html>.
+  We don't expect that any tar archives in practical use have type 'N'
+  records, but if you have one and you trust its contents, you can
+  decode it with GNU tar 1.16 or earlier.
+
 version 1.16 - Sergey Poznyakoff, 2006-10-21
 
 * After creating an archive, tar exits with code 1 if some files were