-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 20 Jan 2025 11:39:12 +0200 Source: libtar Binary: libtar-dev libtar0 libtar0-dbgsym Architecture: mips64el Version: 1.2.20-8+deb12u1 Distribution: bookworm Urgency: medium Maintainer: mipsel Build Daemon (mipsel-osuosl-05) Changed-By: Adrian Bunk Description: libtar-dev - C library for manipulating tar archives (development files) libtar0 - C library for manipulating tar archives Changes: libtar (1.2.20-8+deb12u1) bookworm; urgency=medium . * Non-maintainer upload. * CVE-2021-33643: out-of-bounds read in gnu_longlink() * CVE-2021-33644: out-of-bounds read in gnu_longname() * CVE-2021-33645: memory leak in th_read() * CVE-2021-33646: memory leak in th_read() Checksums-Sha1: a6633eaede0cbb683ab6a58504a3e98bddf0ccc0 42216 libtar-dev_1.2.20-8+deb12u1_mips64el.deb f800abe290a8d14f5fc3150d45b8b9ad5651302d 49088 libtar0-dbgsym_1.2.20-8+deb12u1_mips64el.deb b77755dcdfdd9bba5bceabcc617caf0fc5804363 19624 libtar0_1.2.20-8+deb12u1_mips64el.deb 06208c8f39da2ed22755572804e15f6cfb910cf2 6215 libtar_1.2.20-8+deb12u1_mips64el-buildd.buildinfo Checksums-Sha256: bde8b08206b0a28adcddc7c09553a271155f9c67ec864f236a0ff921e854c05b 42216 libtar-dev_1.2.20-8+deb12u1_mips64el.deb e268d846bfa2c19edba5a46e7b49f06918eb5723dc25fc8d6432afa49ea8d8f2 49088 libtar0-dbgsym_1.2.20-8+deb12u1_mips64el.deb 70d1ad7b98d494b7851389a56b375bedaf68bdd68c7ed234ee0c3bdb0eb5264e 19624 libtar0_1.2.20-8+deb12u1_mips64el.deb 6886fee6b3674a4fad8740605aec04cfeddf18a3311b013efb5f550c2106aa42 6215 libtar_1.2.20-8+deb12u1_mips64el-buildd.buildinfo Files: 08b0caf3514a81a6a16a4f6a590302f5 42216 libdevel optional libtar-dev_1.2.20-8+deb12u1_mips64el.deb d08721dfedc86f23be7ef04d6049d8ab 49088 debug optional libtar0-dbgsym_1.2.20-8+deb12u1_mips64el.deb 5e0ce6ab5ff4502cf9c47fd3b774d00d 19624 libs optional libtar0_1.2.20-8+deb12u1_mips64el.deb d695f3ff6c8c213327d027fbe16e75ba 6215 libs optional libtar_1.2.20-8+deb12u1_mips64el-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEuQAPGkYIXAAfq7z1C2Vm2FYVKKAFAmeVLbcACgkQC2Vm2FYV KKCMjQ/+P4PjheRcCzafPWZ743IFXpf+cfJ7harnCdxQOrIfTNAMlrFVVxqWrTag GaAPjaSUEv4AlEdrBg1/aEi9BrZvIYvhpWqm8NSul1otqfRpcyoaFkWPO/fUnAx9 RN6oOY4BOaGyGtdvV5ux1HZv2Qx2o1hD1RUWoXoS+4a0YYvO4XXeyMa1Xd/jW0wz beIOfNEbJOphBNpLxq6VzaGx8L+9aOQ3R3/7E5JLt/4lx3DO7JboO7SMMnc3d65b FFc4DWntUWeq4Sf/MBoBiAkN2khYJDe9zT4bVFw5o8kdQMwPJw0haWfzC7e0dXh7 86MNqEE+KS95xDhPMvkMJfTEmIE7w3EGl0c7EdVx5TvZKlFN5VH9CoEtwCWm6Fyl Vzk3K5EwckHF0OCpwrEGnAVfe78amomtmAYAqwbKuWSrMM1BUQY8GFxR4nS96sdM GWweanPH1Mf5Du4IDlmTybHxMzUXxfUoHR3eSPq9wTHN04Eb+7SHyXG+mYNVWbG+ RKgn6FKO9iNWM0bIZAqmch8FprOXc2DcLOaL3nPglsGuGf2RL+4hxMWy2jFEQ0Ez oGRPDC3lfNVXQ/y7xyF1M2NFfGUfS21ulwJu/G7NSj30yawdomPsFOGf8+PKhu1c OiEx/4oGoHxBjJHIfBZizgtCNsSi4JVR5mnoV4I8+z/jNursK78= =No8U -----END PGP SIGNATURE-----