Format: 1.8
Date: Tue, 05 Dec 2023 15:46:50 +1030
Source: tar
Binary: tar tar-scripts
Architecture: amd64 amd64_translations
Version: 1.30+dfsg-7ubuntu0.20.04.4
Distribution: focal
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@lcy02-amd64-107.buildd>
Changed-By: Alex Murray <alex.murray@canonical.com>
Description:
 tar        - GNU version of the tar archiving utility
 tar-scripts - optional scripts for GNU version of the tar archiving utility
Launchpad-Bugs-Fixed: 2029464
Changes:
 tar (1.30+dfsg-7ubuntu0.20.04.4) focal-security; urgency=medium
 .
   * SECURITY UPDATE: stack overflow via crafted xattr (LP: #2029464)
     - debian/patches/CVE-2023-39804.patch: allocate xattr keys and values
       on the heap rather than the stack in src/xheader.c
     - CVE-2023-39804
Checksums-Sha1:
 581c947d6653814a7300417b89baa26ba3782a8f 737328 tar-dbgsym_1.30+dfsg-7ubuntu0.20.04.4_amd64.ddeb
 163f37f32bb6805a00e95d01be1f92dfe6acad36 9248 tar-scripts_1.30+dfsg-7ubuntu0.20.04.4_amd64.deb
 9e826d9c0d9c62f32c65c26e0317df6a3815ff24 6515 tar_1.30+dfsg-7ubuntu0.20.04.4_amd64.buildinfo
 7e24d67612aa0a5d087c763e96f6372ff029a22d 239740 tar_1.30+dfsg-7ubuntu0.20.04.4_amd64.deb
 a5f0cbd926cd2588ab51d7e931dd4421f1d1e5c6 1707609 tar_1.30+dfsg-7ubuntu0.20.04.4_amd64_translations.tar.gz
Checksums-Sha256:
 278380886bc13fbf28474ca7c1448742f518311a321865a5b698505c28867656 737328 tar-dbgsym_1.30+dfsg-7ubuntu0.20.04.4_amd64.ddeb
 145963f451c965ea06801e6c24c1f56b72a0eb5e68db98bb2c2f7f6a3ff93aa7 9248 tar-scripts_1.30+dfsg-7ubuntu0.20.04.4_amd64.deb
 a8da2b74a3017063c8280b0d5edb08e4c201a0ea82b40cff7dda0a75f898d3e5 6515 tar_1.30+dfsg-7ubuntu0.20.04.4_amd64.buildinfo
 7387a202f0c71a5638c9514f854f2efd9809e24fa5212d1c7227b02bd06be5ec 239740 tar_1.30+dfsg-7ubuntu0.20.04.4_amd64.deb
 8cedd07f5216316d1f68c82f7376d36114e40ba2490bffae981afdce1871cc91 1707609 tar_1.30+dfsg-7ubuntu0.20.04.4_amd64_translations.tar.gz
Files:
 269f6bb8db707f0c93b70a7edbbed1e3 737328 debug optional tar-dbgsym_1.30+dfsg-7ubuntu0.20.04.4_amd64.ddeb
 e4f2f93ac13ae18e35d7b8685cfbb7c8 9248 utils optional tar-scripts_1.30+dfsg-7ubuntu0.20.04.4_amd64.deb
 1ebd5ab15c9b6aa9ed559828a0f17bec 6515 utils required tar_1.30+dfsg-7ubuntu0.20.04.4_amd64.buildinfo
 31b04f17e9efe7a5e6c3a0e56d591476 239740 utils required tar_1.30+dfsg-7ubuntu0.20.04.4_amd64.deb
 ecc28e26073ce85be8e8c8165b82ba7e 1707609 raw-translations - tar_1.30+dfsg-7ubuntu0.20.04.4_amd64_translations.tar.gz
Original-Maintainer: Bdale Garbee <bdale@gag.com>