Skip to content

Tarminal v0.1.1

Choose a tag to compare

@github-actions github-actions released this 05 Jul 02:31

Tarminal 0.1.1

Fixed

  • Allow safe relative symlinks when installing Linux tarball applications.
  • Preserve symlinks when copying extracted app files from the staging directory into the final install directory.
  • Fix installation of real-world tarball apps that bundle shared libraries through symlinks, such as Blender.

Security

  • Symlink extraction still rejects unsafe targets.
  • Absolute symlink targets are rejected.
  • Symlink targets that escape the archive root through .. traversal are rejected.
  • Hard-link entries remain unsupported for now.

Notes

  • Symlink support is enabled by default because many Linux application tarballs include bundled library symlinks.