-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 31 Dec 2018 09:26:14 +0000 Source: tar Binary: tar tar-scripts Architecture: source amd64 Version: 1.27.1-2+deb8u2 Distribution: jessie-security Urgency: high Maintainer: Bdale Garbee <bdale@gag.com> Changed-By: Chris Lamb <lamby@debian.org> Description: tar - GNU version of the tar archiving utility tar-scripts - optional scripts for GNU version of the tar archiving utility Closes: 917377 Changes: tar (1.27.1-2+deb8u2) jessie-security; urgency=high . * CVE-2018-20482: Fix a potential denial of service vulnerability where --sparse can loop endlessly if the file shrinks whilst it is being read. (Closes: #917377) Checksums-Sha1: cae82987769856902ef7e9c39cc616c9176af61e 1923 tar_1.27.1-2+deb8u2.dsc ff027757abf420beb2f09fa59b37debbd45b15dd 1704252 tar_1.27.1.orig.tar.xz d7b5357131985ad5574de7ef254cd019ea54e96c 33736 tar_1.27.1-2+deb8u2.debian.tar.xz 17b0ff459f68b7a51d71202397c275aa96e484cd 676370 tar_1.27.1-2+deb8u2_amd64.deb bcc6c0308a8a4f7f5391a70713a7687a7145cb80 20480 tar-scripts_1.27.1-2+deb8u2_amd64.deb Checksums-Sha256: bde1870e1a78c8f0967166ab8e0c8f22ca54e789bbc2aaa3a92afe6521304dfa 1923 tar_1.27.1-2+deb8u2.dsc 58169c5a03c04be20d3fb91010b01e822c6a58060a96e7cf2f9c1944de0151ab 1704252 tar_1.27.1.orig.tar.xz 2459839d37230c8677d087eb02d9e5e7efa18bcb147ed81aa33b9c4720763947 33736 tar_1.27.1-2+deb8u2.debian.tar.xz 97143baf4c168ce46203eb04e68b1e038d3ed91cb0e2fe12a9f2b16f020f6d97 676370 tar_1.27.1-2+deb8u2_amd64.deb 0d49fed8d72b0cd6c3557c14b4896065e6c01d6db96bf7b13b075059bc718f46 20480 tar-scripts_1.27.1-2+deb8u2_amd64.deb Files: 559209cd7446de50ff2f4430056a44eb 1923 utils required tar_1.27.1-2+deb8u2.dsc 992c029086ad2ab7c27d5c32db7d4400 1704252 utils required tar_1.27.1.orig.tar.xz e54cf89d62e31cb56337d89c9d3e8bf9 33736 utils required tar_1.27.1-2+deb8u2.debian.tar.xz 3537216844ce460c722cd4c9f875cd48 676370 utils required tar_1.27.1-2+deb8u2_amd64.deb 4fc4d1651e8782360a762e421ae68e70 20480 utils optional tar-scripts_1.27.1-2+deb8u2_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAlwp5kgACgkQHpU+J9Qx HlitexAAkgok967Pa/sbpyI2YDUJjlfNLr22VJfY/uxVXMEyBSKqDtaLrfHRIz8m 3seaq9IgcuorcdVUhOBHWHtKLBdbiJ5QLFSvODpVeLN1m43yp0OKGA3y/njY2UUP +4vo8dmqEPnu1yG56/OaKhBG20v3MqfHzN+A0HbTKG8WA7idXbZNcezmK/bnYKjk 9DojbZD6+InsGIXW7AUgk1anz5A3hbAfRTyjPVG2seFfd9m+9fEpyux5puNj2Psb z7vyXctekI1rOcP+g/twk/S72pPzTvXE3PwMvAYI2t/OAwx3PgDxP7vvE81gggoz Fy4RMT4ofUR3TRkAfCg3tzi/5WFfFn//MykurjVnGj28Z8r85ixQih4mdKRyX45B oIkbs/UuGnvIL7aMuCMfMMZIHQuhM32dbAQL+Zr28cXjOaVD/sR872duG+shImGz eaDxKfoPrBxYnMPUU8t/UldrZg2tiGrqzjcSen46ATlvI3hz0TAIz5Qai4w+AKZi 7EJMb+v3hLzBVlpXzoZBcUiFZGO9XYjIer3gNQvbkWC6WQrEDCu3O+9NxvPez5hU kwcrbRH+14zePOzbLu4PhrfEnC0TBuQGo5IZ4GAVjeWCJFmDQYaBcNXKgliZ1QAF sgS0AmC2RPGxrF40miiPM3PuHx0zby1WjoPRUYfZy99s06zdQPs= =RPWP -----END PGP SIGNATURE-----
