Hi Guix, This patch fixes CVE-2016-6321 for GNU Tar. The patch is basically directly copied from upstream with the modification to the NEWS file removed since it hunks out to a reject file. The message below is for your reference.