-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 20 Jan 2025 11:39:12 +0200 Source: libtar Binary: libtar-dev libtar0 libtar0-dbgsym Architecture: mipsel Version: 1.2.20-8+deb12u1 Distribution: bookworm Urgency: medium Maintainer: mipsel Build Daemon (mipsel-osuosl-04) Changed-By: Adrian Bunk Description: libtar-dev - C library for manipulating tar archives (development files) libtar0 - C library for manipulating tar archives Changes: libtar (1.2.20-8+deb12u1) bookworm; urgency=medium . * Non-maintainer upload. * CVE-2021-33643: out-of-bounds read in gnu_longlink() * CVE-2021-33644: out-of-bounds read in gnu_longname() * CVE-2021-33645: memory leak in th_read() * CVE-2021-33646: memory leak in th_read() Checksums-Sha1: 6c949206d27960a1468da652286c2f9d88adb09f 41700 libtar-dev_1.2.20-8+deb12u1_mipsel.deb cb2ccb5194aecd82a80779d6d4599f9d2d382a0d 47484 libtar0-dbgsym_1.2.20-8+deb12u1_mipsel.deb 9a53d5264fcf3a2f65fd0ac9ee8609b2df887e92 19284 libtar0_1.2.20-8+deb12u1_mipsel.deb 20b723311d6a02fa1506e165a2fbe143231e284b 6186 libtar_1.2.20-8+deb12u1_mipsel-buildd.buildinfo Checksums-Sha256: cba3e36298d72b97fb5060447e6bef7e55a307a41d8cfa67bc08911c8e1d7371 41700 libtar-dev_1.2.20-8+deb12u1_mipsel.deb cf79761055ce83be739bc21dc2b7ae0009a522da52db75eda668c31e5db6282d 47484 libtar0-dbgsym_1.2.20-8+deb12u1_mipsel.deb a4ab21fbce598de995c38ccd152ba7adcdbf4e895aae00b15a4c01290157c0ff 19284 libtar0_1.2.20-8+deb12u1_mipsel.deb 67adf1688d53b5b781f8e1e5a4900bf7013b592eae6591fdd820d042d9aefc2c 6186 libtar_1.2.20-8+deb12u1_mipsel-buildd.buildinfo Files: 8d57e85f69ae0a4469437e4d918b5d0a 41700 libdevel optional libtar-dev_1.2.20-8+deb12u1_mipsel.deb 0402edb6fdba53fb18a3b767c8380d67 47484 debug optional libtar0-dbgsym_1.2.20-8+deb12u1_mipsel.deb 4f7d874bf3776b0044746018ac3ef5bf 19284 libs optional libtar0_1.2.20-8+deb12u1_mipsel.deb 235c07cfe9860b7aa9f4899f10199963 6186 libs optional libtar_1.2.20-8+deb12u1_mipsel-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERbXMbY9VMQqnSaVEV4aVsMglzVcFAmeVIt4ACgkQV4aVsMgl zVdctA/+OTxrrIyWMjIGXSTfOhGNceYUrnGY0VrboANyk2rbb+AY+uf0QvUnWdts qFH6ImFNN+mxUyNEKlykXBaJqQSR9ezW5sZP62cJnAJJTMjO7G3XwCkLINAebhbT E0OgW74+zSt8z4XolxfDnKIhjWfIMkK3k/CvDP2Ugv6p93lPLMgtw0hqOiRnw7jq biZ9lupsLHQrZbsN6jFkfjX8loX8tMeT3xUdEvfd52bv0l0FYVUvQCFR325x7/i7 VI4RVNhTvnLWr3g5AD4pXUuhUVmmo1eLqwAwOAN1bfG44FyPnEifChp2kdm/P8hg cNc+j+ylU7zwveVypzPUl0CCbWvpw553ULiP88HmfbXhT6JORuGuZualQ2a7G7nu /PJa5p5fvik74BopBpeccAtdhO2TABedGk/TpfxnhqcZ2VAA2p7IsDzt4VqPmZv+ nLlnc80Qa5ASzP3ifugecZmtkgah9yLREdbEi+xs8AZF8pfA9VWjpTvpB20xGDaU DdOfGdT78hwJ3CMKZnUPH6hR875tQaltxxqX+DxcbKx0fYe1wBMKY2PKO2RAGzDN 3NPoezLDbOv5BW5yJQ+cdwdRzs/Nl77q38xt5sx/YKrWXzNZaYRzxrNLStDN5nZK 27cCXDff4X5iLq1LL83abvOMbn+GGkL2lT588UBGcciNU+A/XRM= =gqvt -----END PGP SIGNATURE-----