-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 11 Aug 2021 21:50:15 +0200 Source: node-tar Architecture: source Version: 6.0.5+ds1+~cs11.3.9-1+deb11u1 Distribution: bullseye Urgency: medium Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org> Changed-By: Yadd <yadd@debian.org> Closes: 992110 992111 Changes: node-tar (6.0.5+ds1+~cs11.3.9-1+deb11u1) bullseye; urgency=medium . * Team upload * Remove paths from dirCache when no longer dirs (Closes: #992110, CVE-2021-32803) * Strip absolute paths more comprehensively (Closes: #992111, CVE-2021-32804) Checksums-Sha1: 5c0ceb1e08d4552ee309f6c820cc504abf0e7ef5 3565 node-tar_6.0.5+ds1+~cs11.3.9-1+deb11u1.dsc b37ed15289a8269a3cd12c8af49307b23dda1fc2 11768 node-tar_6.0.5+ds1+~cs11.3.9-1+deb11u1.debian.tar.xz Checksums-Sha256: 0336b87166da100cea4f4a2be3b627f843a28baf995a995787cc83e44bd68657 3565 node-tar_6.0.5+ds1+~cs11.3.9-1+deb11u1.dsc e20fabeb51b1d77d8c228562e7cbc104e140a25b33e364dd7389349100d8f113 11768 node-tar_6.0.5+ds1+~cs11.3.9-1+deb11u1.debian.tar.xz Files: 75eb421007d0f23df91773ce2d96881b 3565 javascript optional node-tar_6.0.5+ds1+~cs11.3.9-1+deb11u1.dsc 2aa0da0c849c30bae42f426a0f391d65 11768 javascript optional node-tar_6.0.5+ds1+~cs11.3.9-1+deb11u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAmFYAHkACgkQ9tdMp8mZ 7unZ2w/+JIXkBI+HjfGnC0gV0Xvz/BbA2vjE8//Bvr6gGskifElBHqhlJTCtRE6c h5pTRwhX0AZ7k6PPSLSXLbfE5nZhXju4z3cLHyi8+SbmOlLjCk1hUyk+87dVajdr 4KU5UiH2I33KJXf+J05Xcw9A60i94y8b3oA264X3+CvWWYzupGybHfIQjFPlrMhZ JvcewKstATlMPmmXksqytMGtHR04Hz/m59p1yLIjysDmJBSlM+9Cy+ZjXPT9kJkO EI8JFlBSSphgLkbQF563JfODx9EFieaxkiFybGuRfhSwc+fkYCttlOaT40gjLFJA VdzNIG7TJWRpBUw1FYg1AKQeWnttVbgjXVFpFwBq8qrKoDHICd0y7+tGKYxF0jij 7Bc9d8C1SwkhkFQ0THMazFDyZQsIp2YFV1uwttQsAaq9SFy4ReervOAwG1DlGfbl PtShVR/Yiba49hTYpNAI0iK2+qCdwwzw9S8BLVr950vY8d2+dQEMdJYcmZcYh25D 89w9vxtALvFVS3Qvopn+JZEN2/QtxxrvXDo+9RStqP4BjlhuNmnwdqEKODX5CieT NuO3lwJC38TxlviYnD4xyr5OVD1QZw8Va7XBiPvLg+Yf21JxMs7cR87jVbrieW+M CQDXT88t5lx//b6uCdIJGcSejUs3kgC9CEQwzfc+szvOk4Rz5yU= =HI2T -----END PGP SIGNATURE-----