-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 09 Jun 2025 22:02:36 +0300 Source: node-tar-fs Architecture: source Version: 2.1.3-0+deb12u1 Distribution: bookworm Urgency: medium Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org> Changed-By: Adrian Bunk <bunk@debian.org> Closes: 1101501 Changes: node-tar-fs (2.1.3-0+deb12u1) bookworm; urgency=medium . * Non-maintainer upload. * New upstream release. - CVE-2024-12905: symlink path traversal (Closes: #1101501) - CVE-2025-48387: hardlink path traversal Checksums-Sha1: 282612fc4786eda51c6678bebd0c4d11f01099ff 2202 node-tar-fs_2.1.3-0+deb12u1.dsc 41b5f9c659d7fa10d0cda24ecae09b97d6b73f4a 7951 node-tar-fs_2.1.3.orig.tar.gz 6f645238c512bc321c11473b8cd30da490bc4f57 3128 node-tar-fs_2.1.3-0+deb12u1.debian.tar.xz Checksums-Sha256: f2fb7d9f7f5e50c09e6050865ef08fa91c438778046080cec32c4acaf1036630 2202 node-tar-fs_2.1.3-0+deb12u1.dsc 061356bce7a39c4b2947f6f406d45179155acfc23edf121f703689768841ad10 7951 node-tar-fs_2.1.3.orig.tar.gz b915da7f3e642970a1d0c9f0f4c89a817ae52c33833e66f749b98585779ec04d 3128 node-tar-fs_2.1.3-0+deb12u1.debian.tar.xz Files: 867147942f1bb8603fedf5a1f224c1dc 2202 javascript optional node-tar-fs_2.1.3-0+deb12u1.dsc 9034827a8b0724931a4262c61395623f 7951 javascript optional node-tar-fs_2.1.3.orig.tar.gz 1c33a18d17c4a4b61236e87f7561ecc0 3128 javascript optional node-tar-fs_2.1.3-0+deb12u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEOvp1f6xuoR0v9F3wiNJCh6LYmLEFAmhIlP0ACgkQiNJCh6LY mLHqbg//T8AG3gBQzVo0dHmigHV+p8QW5GwFPaXbHjeRCScb4ybeJe/ojwI4ZyxB KxfUqFk7odVV+G7VwQjccYzjeyTnGxDVBGPFYcdH+43Z/Ble5tvspQ6O+FFihLx1 5SUwlH4Z5N08M3qpoNFj+uzZv3pfGUlRf/CqRkdu7ubpvLHqsiZUqPwqg8oBm6cR 6MiB4lK0/Dynj33wthCjcs0HU+epjin2d29PGHKV5cJl+OrZI/RjMR1OQHQ36MkG QDPgD/tk4Coyh1ZaFciSyHqL5qiBXbRRNIe6G9wMazyVN6yqYunatkn1yBc63hAM BUfVU9N7wUdtwNQb9OyOgMbpdxu5Q7rXTPKf6J07/myWu1aBWVfNkrj/2ZKg9etz O+PQdH6xBGSDSlK05w9sL9SelXwFVYkyEo1FkWNEo3fuSo3UJBn7GJDUeB6gCFnX BkW+qfgAhy9OpAIttzR0s+49VU5uU1JctL8CDbbiKkYtsYBcDC4ApF4l0ti6BFSe JKSAEnpWuWSZJiiKcA5FvUGTKrSXkz+NiDcrvG5P9jyLBvidOT4f8YuXUw8mA1Ch XjKX6u4NAjbC6+cWUFd2Yg7q0EQxi0RGC39G5FhxT5a82J+ADCtk9+Y4rt8uVLTC Ah3tUhN4QHMkTqJfe7XbK+U8ClAyEthekK5s3+i/zZXWG6kNRO8= =2vS0 -----END PGP SIGNATURE-----