-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 20 Jan 2025 11:39:12 +0200
Source: libtar
Binary: libtar-dev libtar0 libtar0-dbgsym
Architecture: s390x
Version: 1.2.20-8+deb12u1
Distribution: bookworm
Urgency: medium
Maintainer: s390x Build Daemon (zandonai) <buildd_s390x-zandonai@buildd.debian.org>
Changed-By: Adrian Bunk <bunk@debian.org>
Description:
 libtar-dev - C library for manipulating tar archives (development files)
 libtar0    - C library for manipulating tar archives
Changes:
 libtar (1.2.20-8+deb12u1) bookworm; urgency=medium
 .
   * Non-maintainer upload.
   * CVE-2021-33643: out-of-bounds read in gnu_longlink()
   * CVE-2021-33644: out-of-bounds read in gnu_longname()
   * CVE-2021-33645: memory leak in th_read()
   * CVE-2021-33646: memory leak in th_read()
Checksums-Sha1:
 466f292a269496949864312fde65a49979a72540 39356 libtar-dev_1.2.20-8+deb12u1_s390x.deb
 8d72d64f2b5755e743dd48452998ddbf770f3744 44980 libtar0-dbgsym_1.2.20-8+deb12u1_s390x.deb
 f7e2dd4d22a604e19fbe4b2c05f05ebf172332df 19996 libtar0_1.2.20-8+deb12u1_s390x.deb
 143329f73e48c36faef0bb2c4486fe503869fb46 6249 libtar_1.2.20-8+deb12u1_s390x-buildd.buildinfo
Checksums-Sha256:
 f3dd609ccb33353bc3ca9575d76db646dc2a25003899c39527c0d58de9f79514 39356 libtar-dev_1.2.20-8+deb12u1_s390x.deb
 35fde24aa6f239285d12846d0adb0005aa510499fb9e0022af38533d69443ab7 44980 libtar0-dbgsym_1.2.20-8+deb12u1_s390x.deb
 4000e22df3a9fa0dec381b940aac6d16f61f4b228e473845ff63a214638c7a28 19996 libtar0_1.2.20-8+deb12u1_s390x.deb
 2fd4410ae25c57f1142dc0fca58aef3dc090c11892c5710d09548fc8f643379d 6249 libtar_1.2.20-8+deb12u1_s390x-buildd.buildinfo
Files:
 bebf2b828b564891c2ef46c732f5a779 39356 libdevel optional libtar-dev_1.2.20-8+deb12u1_s390x.deb
 a516d5effbb14c7421e4e8b7c6c45adc 44980 debug optional libtar0-dbgsym_1.2.20-8+deb12u1_s390x.deb
 aaff5363585fc5b8b2007b95199a6528 19996 libs optional libtar0_1.2.20-8+deb12u1_s390x.deb
 bfca090ee4c06aa3320ea57127d60d81 6249 libs optional libtar_1.2.20-8+deb12u1_s390x-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=B27m
-----END PGP SIGNATURE-----