vcswatch reports that
this package seems to have a new changelog entry (version
4.4.10+ds1-2, distribution
unstable) and new commits
in its VCS. You should consider whether it's time to make
an upload.
CVE-2018-20834: A vulnerability was found in node-tar before version 4.4.2. An Arbitrary File Overwrite issue exists when extracting a tarball containing a hardlink to a file that already exists on the system, in conjunction with a later plain file with the same name as the hardlink. This plain file content replaces the existing file content.
CVE-2018-20834: A vulnerability was found in node-tar before version 4.4.2. An Arbitrary File Overwrite issue exists when extracting a tarball containing a hardlink to a file that already exists on the system, in conjunction with a later plain file with the same name as the hardlink. This plain file content replaces the existing file content.
Please fix it.
Standards version of the package is outdated.
wishlist
The package should be updated to follow the last version of Debian Policy
(Standards-Version 4.4.0 instead of
4.2.1).
![[bug history graph]](https://qa.debian.org/data/bts/graphs/n/node-tar.png){kind=link}