-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 20 Jan 2025 11:39:12 +0200 Source: libtar Binary: libtar-dev libtar0 libtar0-dbgsym Architecture: ppc64el Version: 1.2.20-8+deb12u1 Distribution: bookworm Urgency: medium Maintainer: ppc64el Build Daemon (ppc64el-conova-01) Changed-By: Adrian Bunk Description: libtar-dev - C library for manipulating tar archives (development files) libtar0 - C library for manipulating tar archives Changes: libtar (1.2.20-8+deb12u1) bookworm; urgency=medium . * Non-maintainer upload. * CVE-2021-33643: out-of-bounds read in gnu_longlink() * CVE-2021-33644: out-of-bounds read in gnu_longname() * CVE-2021-33645: memory leak in th_read() * CVE-2021-33646: memory leak in th_read() Checksums-Sha1: 07b209da2ddcfcbfc249481fcc82bda9ca3dab3e 43228 libtar-dev_1.2.20-8+deb12u1_ppc64el.deb 589e310128f6ca846a4059d2b46846f0ca6a4d72 47020 libtar0-dbgsym_1.2.20-8+deb12u1_ppc64el.deb 81bc207b1bf26767c019b88157ff812a84bd747b 22844 libtar0_1.2.20-8+deb12u1_ppc64el.deb 2da5eb48f677102031b3eb957e1933a69119ad0e 6356 libtar_1.2.20-8+deb12u1_ppc64el-buildd.buildinfo Checksums-Sha256: 21a98b4ad759f1085b9232cc88d660338206be1453844451d6f8fb4a8a638bf2 43228 libtar-dev_1.2.20-8+deb12u1_ppc64el.deb 81aef70c1f55de843ca98321929feb4e4a68b1d818b31a9570918dcbe979b19e 47020 libtar0-dbgsym_1.2.20-8+deb12u1_ppc64el.deb 732629591d06da40bd227ab4d5da467f6cf51224f766aff4de46920a4ef7bea0 22844 libtar0_1.2.20-8+deb12u1_ppc64el.deb fff9893e723c9cdfca691379eff256cc0e54e4365edf695c67a33cae55ece504 6356 libtar_1.2.20-8+deb12u1_ppc64el-buildd.buildinfo Files: 652b59c578581fd422025791109c041b 43228 libdevel optional libtar-dev_1.2.20-8+deb12u1_ppc64el.deb f1d0b197959de0de48023b1002fa9add 47020 debug optional libtar0-dbgsym_1.2.20-8+deb12u1_ppc64el.deb f17ad5c1e96e5b228bf9291e7cd23e4b 22844 libs optional libtar0_1.2.20-8+deb12u1_ppc64el.deb 54dfb0daa5a086203889ac376d196950 6356 libs optional libtar_1.2.20-8+deb12u1_ppc64el-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEvNkWZvjZkiWgJGRETMSrGPLkYxUFAmeVILIACgkQTMSrGPLk YxUn2RAAxI3o826G41KIYS9Z+Jv4bJT9YeGlkvXUToLRMvnArJXb2/gAgWZjGPnh f+GeXvU5Hrdvr60SGRfEtK539NiBZ6gY41Ge7MpbVZ5JdRxGcg67iupzihm0PZlz hR2kqszs97FVzM8ndJBGPi02nhykH5R8KMrRCnfWoobxACLtslfNLMtROIsKj5rG Np8pRxBqtvCzHUxQx0lTd0AszH7fTgMMwfc0aatlPUWwGuMchy/2w8z5VdOgi8uO 80iXIhKA5ZQdhL3XayWh3R7qRCrEJCMaHUdQFcL/K5Adrk/bnwixpJjmt8psnwP5 HxqMWjOp6m2+4InGm1qYtT6IURz9Zopy8vqkbHORc8m04xdEgxeWXObYZPhcY1WN FZCorwp21MTnyBVrE/k2Rgh1GnTExQnBELQ51cgMIqgfSpsdC71w4kivKEOrFwKG +jysk6Kft0XLeqabq7WB2zrYqOowThvqn3GbhieU1q4eD/oSwJqIljSyDdkDtEJU vpiyf1L+etf8PgPiskNqq3nOeAU1UusHM9gfx6W3zi7ZEf38oqsEw/bwrNajLLCv KOF3zXJMA+TLe6GCpbQo9fxjWk4KEiZ2jaN6DjDk3a9d3wn2apYzFactRe8JVJNo QGaDT2NqacmCn9bMAbv7xhEW4p1QYsI0J8+nrQGy6Q4KfsPzjWI= =XuBC -----END PGP SIGNATURE-----