-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Tue, 28 Aug 2007 09:45:12 -0700 Source: tar Binary: tar Architecture: powerpc_translations powerpc Version: 1.15.1-2ubuntu2.2 Distribution: dapper-security Urgency: low Maintainer: Ubuntu/powerpc Build Daemon Changed-By: Kees Cook Description: tar - GNU tar Changes: tar (1.15.1-2ubuntu2.2) dapper-security; urgency=low . * SECURITY UPDATE: directory traversal with malicious tar files. * src/names.c: adjust dot dot checking, patched inline. * References CVE-2007-4131 Files: 4d125cb2f9a70103406fcffc38fb7c72 534002 base required tar_1.15.1-2ubuntu2.2_powerpc.deb 093f40c6c16a01ea2cdebbb49098df92 745575 raw-translations - tar_1.15.1-2ubuntu2.2_powerpc_translations.tar.gz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2.2 (GNU/Linux) iD8DBQFG1GCz0N0xjzyQZEIRArI2AJkBB2je0CshJiKYuYoP83W2hySSAwCfdURt ypLbn4LftrcU/BiSMeS9Zsg= =8eiH -----END PGP SIGNATURE-----