Accepted tar 1.27.1-2+deb8u2 (source amd64) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 31 Dec 2018 09:26:14 +0000
Source: tar
Binary: tar tar-scripts
Architecture: source amd64
Version: 1.27.1-2+deb8u2
Distribution: jessie-security
Urgency: high
Maintainer: Bdale Garbee <bdale@gag.com>
Changed-By: Chris Lamb <lamby@debian.org>
Description:
tar - GNU version of the tar archiving utility
tar-scripts - optional scripts for GNU version of the tar archiving utility
Closes: 917377
Changes:
tar (1.27.1-2+deb8u2) jessie-security; urgency=high
.
* CVE-2018-20482: Fix a potential denial of service vulnerability where
--sparse can loop endlessly if the file shrinks whilst it is being read.
(Closes: #917377)
Checksums-Sha1:
cae82987769856902ef7e9c39cc616c9176af61e 1923 tar_1.27.1-2+deb8u2.dsc
ff027757abf420beb2f09fa59b37debbd45b15dd 1704252 tar_1.27.1.orig.tar.xz
d7b5357131985ad5574de7ef254cd019ea54e96c 33736 tar_1.27.1-2+deb8u2.debian.tar.xz
17b0ff459f68b7a51d71202397c275aa96e484cd 676370 tar_1.27.1-2+deb8u2_amd64.deb
bcc6c0308a8a4f7f5391a70713a7687a7145cb80 20480 tar-scripts_1.27.1-2+deb8u2_amd64.deb
Checksums-Sha256:
bde1870e1a78c8f0967166ab8e0c8f22ca54e789bbc2aaa3a92afe6521304dfa 1923 tar_1.27.1-2+deb8u2.dsc
58169c5a03c04be20d3fb91010b01e822c6a58060a96e7cf2f9c1944de0151ab 1704252 tar_1.27.1.orig.tar.xz
2459839d37230c8677d087eb02d9e5e7efa18bcb147ed81aa33b9c4720763947 33736 tar_1.27.1-2+deb8u2.debian.tar.xz
97143baf4c168ce46203eb04e68b1e038d3ed91cb0e2fe12a9f2b16f020f6d97 676370 tar_1.27.1-2+deb8u2_amd64.deb
0d49fed8d72b0cd6c3557c14b4896065e6c01d6db96bf7b13b075059bc718f46 20480 tar-scripts_1.27.1-2+deb8u2_amd64.deb
Files:
559209cd7446de50ff2f4430056a44eb 1923 utils required tar_1.27.1-2+deb8u2.dsc
992c029086ad2ab7c27d5c32db7d4400 1704252 utils required tar_1.27.1.orig.tar.xz
e54cf89d62e31cb56337d89c9d3e8bf9 33736 utils required tar_1.27.1-2+deb8u2.debian.tar.xz
3537216844ce460c722cd4c9f875cd48 676370 utils required tar_1.27.1-2+deb8u2_amd64.deb
4fc4d1651e8782360a762e421ae68e70 20480 utils optional tar-scripts_1.27.1-2+deb8u2_amd64.deb
-----BEGIN PGP SIGNATURE-----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=RPWP
-----END PGP SIGNATURE-----