-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 20 Jan 2025 11:39:12 +0200
Source: libtar
Binary: libtar-dev libtar0 libtar0-dbgsym
Architecture: arm64
Version: 1.2.20-8+deb12u1
Distribution: bookworm
Urgency: medium
Maintainer: arm Build Daemon (arm-ubc-01) <buildd_arm64-arm-ubc-01@buildd.debian.org>
Changed-By: Adrian Bunk <bunk@debian.org>
Description:
 libtar-dev - C library for manipulating tar archives (development files)
 libtar0    - C library for manipulating tar archives
Changes:
 libtar (1.2.20-8+deb12u1) bookworm; urgency=medium
 .
   * Non-maintainer upload.
   * CVE-2021-33643: out-of-bounds read in gnu_longlink()
   * CVE-2021-33644: out-of-bounds read in gnu_longname()
   * CVE-2021-33645: memory leak in th_read()
   * CVE-2021-33646: memory leak in th_read()
Checksums-Sha1:
 dbe66194ecfe24239f9a378ebec783a031186bcd 40128 libtar-dev_1.2.20-8+deb12u1_arm64.deb
 f312ad82ec2320df3c9e1a05b85f7fb49249afd7 45208 libtar0-dbgsym_1.2.20-8+deb12u1_arm64.deb
 e3cfafe66f57e23bc61d9b19607a554557f60865 20096 libtar0_1.2.20-8+deb12u1_arm64.deb
 d8d723d225aff8bc1159fb558f78aa7ac547dcf3 6353 libtar_1.2.20-8+deb12u1_arm64-buildd.buildinfo
Checksums-Sha256:
 53d16ea8df2122bf2da058edffd7b2c42639dd21a75337e3acf72681375f0a73 40128 libtar-dev_1.2.20-8+deb12u1_arm64.deb
 94aab858873d6b56d8d5746ded6c15bd244a75bdccdadf0429e7d2e1e5bf345b 45208 libtar0-dbgsym_1.2.20-8+deb12u1_arm64.deb
 0fd5c6b36fc96b93d589771befdbd2b27819da6a19a6bc12a6e17fc0085364ea 20096 libtar0_1.2.20-8+deb12u1_arm64.deb
 adae0a86dde6ae9873eb23a6b3a0f27d1e99a9996466e0ae474cd1f26b45ced0 6353 libtar_1.2.20-8+deb12u1_arm64-buildd.buildinfo
Files:
 929f4933b9e4330e7cffc8e7d8b2cd3c 40128 libdevel optional libtar-dev_1.2.20-8+deb12u1_arm64.deb
 ab6087dd1144f3a8880b19f0a3c4dc07 45208 debug optional libtar0-dbgsym_1.2.20-8+deb12u1_arm64.deb
 8955d1d82f7f32253a65ceb0d9fe3778 20096 libs optional libtar0_1.2.20-8+deb12u1_arm64.deb
 207c6d78dff9a9a5b318db1922dbe4e0 6353 libs optional libtar_1.2.20-8+deb12u1_arm64-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=0rzy
-----END PGP SIGNATURE-----