Re: [Bug-tar] Unexpected symlink attack due to change in link following behaviour

[Sergey Poznyakoff]

Clarence Dang <address@hidden> wrote:

> almost nobody reads documentation.

That is, unfortunately, true. But this problem has nothing to do with
GNU tar or any other project in particular. In general, all any
developer is able to do is properly document any changes to the project.
If a user does not wish to read the docs, it is his problem.

> Changing subtle behaviour is dangerous as DOSEMU has shown.

Nevertheless, it has to be done from time to time due to various reasons
(in this case it was to fix old incompatible behavior).

Regards,
Sergey