tar 1.34+dfsg-1.2ubuntu1.1 source package in Ubuntu

Changelog

tar (1.34+dfsg-1.2ubuntu1.1) mantic-security; urgency=medium

  * SECURITY UPDATE: stack overflow via crafted xattr (LP: #2029464)
    - debian/patches/CVE-2023-39804.patch: allocate xattr keys and values
      on the heap rather than the stack in src/xheader.c
    - CVE-2023-39804

 -- Alex Murray <email address hidden>  Tue, 05 Dec 2023 15:44:03 +1030

Upload details

Uploaded by:
Alex Murray
Uploaded to:
Mantic
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
utils
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Mantic updates main utils
Mantic security main utils

Downloads

File Size SHA-256 Checksum
tar_1.34+dfsg.orig.tar.xz 1.9 MiB 7d57029540cb928394defb3b377b3531237c947e795b51aa8acac0c5ba0e4844
tar_1.34+dfsg-1.2ubuntu1.1.debian.tar.xz 21.1 KiB bfd15161fdc150fac71852569c53f00e335d5612c5fe11d0dcf0c27f3d0bd07e
tar_1.34+dfsg-1.2ubuntu1.1.dsc 1.8 KiB 69e093303360942accb61f73321c529456ed8e0168473f0cac9ce7e37a751208

View changes file

Binary packages built by this source

tar: GNU version of the tar archiving utility

 Tar is a program for packaging a set of files as a single archive in tar
 format. The function it performs is conceptually similar to cpio, and to
 things like PKZIP in the DOS world. It is heavily used by the Debian package
 management system, and is useful for performing system backups and exchanging
 sets of files with others.

tar-dbgsym: debug symbols for tar
tar-scripts: optional scripts for GNU version of the tar archiving utility

 This package provides the backup, restore, backup.sh, and dump-remind
 scripts that are mentioned in the tar documentation.