-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 20 Jan 2025 11:39:12 +0200 Source: libtar Architecture: source Version: 1.2.20-8+deb12u1 Distribution: bookworm Urgency: medium Maintainer: Magnus Holmgren Changed-By: Adrian Bunk Changes: libtar (1.2.20-8+deb12u1) bookworm; urgency=medium . * Non-maintainer upload. * CVE-2021-33643: out-of-bounds read in gnu_longlink() * CVE-2021-33644: out-of-bounds read in gnu_longname() * CVE-2021-33645: memory leak in th_read() * CVE-2021-33646: memory leak in th_read() Checksums-Sha1: 85e6269de3614c09b991822800f59be0c884a1e1 1924 libtar_1.2.20-8+deb12u1.dsc 8589154a4707033b3f2dd2d201918cd6a7064d5e 63542 libtar_1.2.20.orig.tar.gz 8ba1bdb6a3e430e9107e2f81907550e4c8acd6b1 12124 libtar_1.2.20-8+deb12u1.debian.tar.xz Checksums-Sha256: 1bafa870f6225de73b5ea9da58d5d58c01352df9ede16e3178b0b6a3c6a1c360 1924 libtar_1.2.20-8+deb12u1.dsc 50f24c857a7ef1cb092e6508758b86d06f1188508f897f3e6b40c573e8879109 63542 libtar_1.2.20.orig.tar.gz 33838aee276d18f8a077caa84168c65fa7aa60ab96d4a4ce523cc3ba5e45ac8c 12124 libtar_1.2.20-8+deb12u1.debian.tar.xz Files: c78716b530ed8e599c9c5cbc339e1ba5 1924 libs optional libtar_1.2.20-8+deb12u1.dsc 6ced95ab3a4b33fbfe2dfb231d156cdb 63542 libs optional libtar_1.2.20.orig.tar.gz 92cc5d867aef18aa8d3a506cfcf55007 12124 libs optional libtar_1.2.20-8+deb12u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEOvp1f6xuoR0v9F3wiNJCh6LYmLEFAmeOWiAACgkQiNJCh6LY mLHEIA/9FqaJ2MO1vEwhTene5Jlr2QbRk1PbC/qSqvMbyci/Vd1nA6BGFKgqnX5s 15uliI//ZaoKp3lHAeagW3fUEyEmzy26dBvzC+9h24G3jHZ7mycNEMgdPU1FNYV1 RAi9RsE0ca2VEaqVesJPd/Urh3eDsBDh2rSlNd7CDTMizBic0cIllrqIATv831JD b0WsBbD1hDz0QzUJqjmKqKXmpuQej97VAnLMqDf6FE5Sgc055QgxccSLA/bF0vMM NmrRoEK4sNWBBWwQJt/Bm/835xxjMiM8pK2euB4I1QTblgVNwLm/m/zxgmUDxy+c BJNAzNcGsyNtQAuDsJGEobYg11Sa269hE70ioLu9OzgqMhPT1jGPdl33LHEgGCH6 y7Vca/M3B7M8URIlNbm8XoswufLWv0f26it2nyDBTh0K09e0lHABWOx3xFi1f42p SvygZsjVzQMywKhif7toJeXYaLeFgRdlDNNzXS1eiu9X0V0hvKYT95QaRlMm4Chh wXB9aNqZQRL2AG5VuMOmpC4Sf4yYgn53mfaVvZgwAV3Mua2fR69LBApGrkVWBw/A WYLFB+etLePBJUF3RqQIBeg8318APKpRJahHln0Mnyo5+/TlxR8hHyoFRihQwBO6 31Rn3EL2J5a7R8S8mgKA5l9dKKT/W9aNs0dZHVuAA10TdFSOcnI= =k520 -----END PGP SIGNATURE-----