-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 20 Jan 2025 11:39:12 +0200
Source: libtar
Binary: libtar-dev libtar0 libtar0-dbgsym
Architecture: armhf
Version: 1.2.20-8+deb12u1
Distribution: bookworm
Urgency: medium
Maintainer: arm Build Daemon (arm-ubc-02) <buildd_arm64-arm-ubc-02@buildd.debian.org>
Changed-By: Adrian Bunk <bunk@debian.org>
Description:
 libtar-dev - C library for manipulating tar archives (development files)
 libtar0    - C library for manipulating tar archives
Changes:
 libtar (1.2.20-8+deb12u1) bookworm; urgency=medium
 .
   * Non-maintainer upload.
   * CVE-2021-33643: out-of-bounds read in gnu_longlink()
   * CVE-2021-33644: out-of-bounds read in gnu_longname()
   * CVE-2021-33645: memory leak in th_read()
   * CVE-2021-33646: memory leak in th_read()
Checksums-Sha1:
 03cc55aed2df9a2755425787e11adac5b82fe7c7 37900 libtar-dev_1.2.20-8+deb12u1_armhf.deb
 188b15d9809c1b469f0cbe8e0f1e0b1c137aab68 46188 libtar0-dbgsym_1.2.20-8+deb12u1_armhf.deb
 820096f3b7d6dcf4cde8a32b3024b1ee3e94d909 18028 libtar0_1.2.20-8+deb12u1_armhf.deb
 9e88ff93d8ea12bf7e59748302bc85d5520e15f7 6229 libtar_1.2.20-8+deb12u1_armhf-buildd.buildinfo
Checksums-Sha256:
 d038a23bb08307be124e8ce0b96f6bf2596c87d4ac647f7d353533404028e99b 37900 libtar-dev_1.2.20-8+deb12u1_armhf.deb
 0ecf013f3ad3121b1c316f636d0e4ac13e1a092c90a37c4b93b21d1b4c937090 46188 libtar0-dbgsym_1.2.20-8+deb12u1_armhf.deb
 04cea5450966544e7cbc601f6617f82508e5117fc3ee4d94e2cb12a25077234a 18028 libtar0_1.2.20-8+deb12u1_armhf.deb
 17f38dfe9226779e157165dbe67666f71956220f05481d01bb44b2a2f2c54d8d 6229 libtar_1.2.20-8+deb12u1_armhf-buildd.buildinfo
Files:
 3d53ef7765a9a531788fb6c573b628f6 37900 libdevel optional libtar-dev_1.2.20-8+deb12u1_armhf.deb
 64fc7b1878d840d372303ba9ccfab087 46188 debug optional libtar0-dbgsym_1.2.20-8+deb12u1_armhf.deb
 defbe78a2629028ee1f7560aaf54a934 18028 libs optional libtar0_1.2.20-8+deb12u1_armhf.deb
 0b515f8fb9373789b5fadfda83c660c4 6229 libs optional libtar_1.2.20-8+deb12u1_armhf-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=rE/o
-----END PGP SIGNATURE-----