-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 20 Jan 2025 11:39:12 +0200
Source: libtar
Binary: libtar-dev libtar0 libtar0-dbgsym
Architecture: armel
Version: 1.2.20-8+deb12u1
Distribution: bookworm
Urgency: medium
Maintainer: arm Build Daemon (arm-ubc-01) <buildd_arm64-arm-ubc-01@buildd.debian.org>
Changed-By: Adrian Bunk <bunk@debian.org>
Description:
 libtar-dev - C library for manipulating tar archives (development files)
 libtar0    - C library for manipulating tar archives
Changes:
 libtar (1.2.20-8+deb12u1) bookworm; urgency=medium
 .
   * Non-maintainer upload.
   * CVE-2021-33643: out-of-bounds read in gnu_longlink()
   * CVE-2021-33644: out-of-bounds read in gnu_longname()
   * CVE-2021-33645: memory leak in th_read()
   * CVE-2021-33646: memory leak in th_read()
Checksums-Sha1:
 986a67f2d8cb2b4827f72669220cd70a702dcc54 38216 libtar-dev_1.2.20-8+deb12u1_armel.deb
 c3326ac04e7e5d867cd03e36765360486d8dee71 45652 libtar0-dbgsym_1.2.20-8+deb12u1_armel.deb
 a548ef1a9445fecb009aed2395c0b502d131241f 17948 libtar0_1.2.20-8+deb12u1_armel.deb
 0a0c069a4b834af6dbc71c43a6d76ae74931680a 6227 libtar_1.2.20-8+deb12u1_armel-buildd.buildinfo
Checksums-Sha256:
 a25aba629024fe8fe1da3eae7072785a6d18f4c06955ca32407fc372fa0900e1 38216 libtar-dev_1.2.20-8+deb12u1_armel.deb
 c283e9ec490e1e546f34ffdb65b23a17b7a5c1d055a5439c9fd4724a575aa69b 45652 libtar0-dbgsym_1.2.20-8+deb12u1_armel.deb
 7db2c8f36748f21103926f6f302ac75a2f867a120eae46590190e7229d54b7b6 17948 libtar0_1.2.20-8+deb12u1_armel.deb
 0e41ad1c592e84391ea2db16c9accba531397f351bb58bf80eaf78b1bab7bb77 6227 libtar_1.2.20-8+deb12u1_armel-buildd.buildinfo
Files:
 e33f0afbadca5678084ec4875f1d1286 38216 libdevel optional libtar-dev_1.2.20-8+deb12u1_armel.deb
 1e63f0da440156dcf90b28e1152496dd 45652 debug optional libtar0-dbgsym_1.2.20-8+deb12u1_armel.deb
 f757116d4de58493c097c0c239b1f616 17948 libs optional libtar0_1.2.20-8+deb12u1_armel.deb
 1c880c56e72415f1f5ccb5c6501729ad 6227 libs optional libtar_1.2.20-8+deb12u1_armel-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEH43oX1cK+BEEs9Pe/9j0ct/+ZwwFAmeVJBIACgkQ/9j0ct/+
ZwwmIg/+Ofu32LdCDV5KexYUldIcsGb3KR/ABpbzrIxj03mGTikx60FUz3H7HKCj
M/aKXcMFOpmrATgG03mBWyrh/JpgFMQJu/UBRTbs/PgxlBLKzX3CFLK6IN0Oe/QN
UA2bdDEvjUSgk3JbEj6Amwi0Y+McNt6O+SK4e8XZLKJq2XSG0yT2Zk7vNrLbwfSU
0AuN/B7V+EyZsoVg8U49k5KWb4yEXgZ5W3UuWcMpvlU5asMTOQqzAkSuRb1bGjsu
jc6lqEk9TJ3jgtl7uK5h488qgKTwuISAFkWZTjJi2ozcjvLpFj3WIEzeBfekmtQe
+1kchom2bm8pXmaUBsvqFrlpAC+gAHXEUbUzf+F82UrIKR6sT4o0GqfI6OarDFVF
qvwGZ/4h37JrsUg+XXRAdKQG+6+pQ6hTw4bwKrrRWV9s4iTQ9/KOm8WwFAUhJoCS
872TThKY3PuwiCYveJPCzAd8ho4fgHNetNJIpwym7br1J8OH9EboYReFbRC3czmc
CmkrIkfOfeUre2I+/dwnKlJuXCHWEoPzaDcKiJ7bd0ECu7kI5B4WDsf8ce+KqLTt
dNZ+XezAklwlCZN76Nus+TNqjy0sRYBdwadtk1kW2cLxklotY/n6bwmgqHjbMX1Z
W/jES45I+rBiRUvRv8KoDvCO18Y4LBrn6mtYXyL+ivf6AxIQ/4Y=
=KWmH
-----END PGP SIGNATURE-----