-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 08 Mar 2026 11:46:04 +0100 Source: node-tar Architecture: source Version: 6.2.1+ds1+~cs6.1.13-8 Distribution: unstable Urgency: medium Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org> Changed-By: Xavier Guimard <yadd@debian.org> Closes: 1129378 Changes: node-tar (6.2.1+ds1+~cs6.1.13-8) unstable; urgency=medium . * Team upload * Parse root off paths before sanitizing parts (Closes: CVE-2026-29786) * Do not write linkpaths through symlinks (Closes: #1129378, CVE-2026-26960) Checksums-Sha1: 5b18c28ca5877b16570c3a343502928dd6b65361 2711 node-tar_6.2.1+ds1+~cs6.1.13-8.dsc 68ec91964b4966ccab2e06a91d44ed2c641dad04 16284 node-tar_6.2.1+ds1+~cs6.1.13-8.debian.tar.xz Checksums-Sha256: 6066b3b366192beda04e2f6e78576ff33c9568f3212f5f7f05c1a85bffeb0352 2711 node-tar_6.2.1+ds1+~cs6.1.13-8.dsc 0ac6fda2549981787c6a413f8f2fbbdfadc5c71400db4563517681e947ac8d42 16284 node-tar_6.2.1+ds1+~cs6.1.13-8.debian.tar.xz Files: a1f82d3f396ca114398ecad13604f803 2711 javascript optional node-tar_6.2.1+ds1+~cs6.1.13-8.dsc 282ce324ff3e29659534bea5e4cdcb8e 16284 javascript optional node-tar_6.2.1+ds1+~cs6.1.13-8.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAmmtU9wACgkQ9tdMp8mZ 7ulTEQ/+JffXk8b32WHxTzf8d9WwGQ2LsA5MttQTWdcn8shGUuGbfY5uzDm5IQW9 KDT7/guRx8R8GJ+a8FxePL1CUICFNOHk9xzGmBDUmE59JpgqRHJb7LEtYHF2/X8r mqVDTeerPj0uSfKuty4Hc5R8GT9quvz9O2nbtRFl0kaDTKZQ9BRe2cjBJFjWUCvH xsNW6LReYXJ6BogLl2K9hVJFKXZgEIpVzKsL4vj3uJlXwdtp8xbR27+UgDCxNQd1 mwU6nhsHLuEcJngZaRiusqk71aHrX6n5cpqrEJbQWKnS44hxZT//wZjIWLDQvKj1 vWppxlqU9wkZ5B0nHFfPKcEiwADmHDY+K216JpOut3qSTvTeAeFzYmVj7LAJTXk2 Na16thSJg/b1VrZjuxu64En+fmDeY21tgksZLa8McWxLv5ittZ1dslEbDlRRiZFC vc+K+3KEXgq0C9AHg5MOQ1vVJKVsG2qN3OrVOHX/8B4FI5HDHSucSKUD3AM0+Nc3 fjlGn2zXZfX0UGNtJttwLoVIllZ6bbFgFkjy0MWg55IMFJ9RYyH7XZDK5T5g9Yh5 BIRBLTGVih6TlZCSap2KdfRSW7vdRcUtpZYL5CmnZgh72SOQj7DZEsxL+qLbAY+I YVvYIIocB17pW/rVccyIE5WArgqg39d0sqRty5t7TejATHSPEcY= =AuNZ -----END PGP SIGNATURE-----
