Accepted tar 1.30+dfsg-3.1 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 31 Dec 2018 21:08:52 +0100
Source: tar
Binary: tar tar-scripts
Architecture: source
Version: 1.30+dfsg-3.1
Distribution: unstable
Urgency: medium
Maintainer: Bdale Garbee <bdale@gag.com>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Closes: 917377
Description:
tar - GNU version of the tar archiving utility
tar-scripts - optional scripts for GNU version of the tar archiving utility
Changes:
tar (1.30+dfsg-3.1) unstable; urgency=medium
.
* Non-maintainer upload.
* Infinite read loop in sparse_dump_region function (CVE-2018-20482)
(Closes: #917377)
Checksums-Sha1:
fdbe76f6266bb8f7f075c1237d0a79f404390729 2114 tar_1.30+dfsg-3.1.dsc
074faf9a15fed02d6b98bafb2b751c6523c0e127 21820 tar_1.30+dfsg-3.1.debian.tar.xz
Checksums-Sha256:
875a0da5143267d75f60c433150fd3c00b63941dd38b9e264b5b742ec056aa1d 2114 tar_1.30+dfsg-3.1.dsc
b120ae4e08d428931735792f940bd757a636b79751af9c2e5b2ebf1f5d582359 21820 tar_1.30+dfsg-3.1.debian.tar.xz
Files:
fefaf784a3be0081c2291a937e4773e7 2114 utils required tar_1.30+dfsg-3.1.dsc
bd44c3d90298a24e0ab96f71e2d861f0 21820 utils required tar_1.30+dfsg-3.1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=NqVL
-----END PGP SIGNATURE-----