Register | Log in

node-tar

read and write portable tar archives module for Node.js

Choose email to subscribe with

general

source: node-tar (main)
version: 4.4.6+ds1-3
maintainer: Debian Javascript Maintainers (archive) [DMD]
uploaders: Jérémy Lal [DMD]
arch: all
std-ver: 4.2.1
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

oldstable: 0.1.18-1
stable: 2.2.1-1
stable-bpo: 4.4.6+ds1-3~bpo9+1
testing: 4.4.6+ds1-3
unstable: 4.4.6+ds1-3

versioned links

0.1.18-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.2.1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.4.6+ds1-3~bpo9+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.4.6+ds1-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

node-tar

action needed

A new upstream version is available: 4.4.10 high

A new upstream version 4.4.10 is available, you should consider packaging it.

Created: 2018-11-08 Last update: 2019-06-19 19:47

1 ignored security issue in stretch low

There is 1 open security issue in stretch.

1 issue skipped by the security teams:

CVE-2018-20834: A vulnerability was found in node-tar before version 4.4.2. An Arbitrary File Overwrite issue exists when extracting a tarball containing a hardlink to a file that already exists on the system, in conjunction with a later plain file with the same name as the hardlink. This plain file content replaces the existing file content.

Please fix it.

Created: 2019-04-30 Last update: 2019-05-05 05:42

1 ignored security issue in jessie low

There is 1 open security issue in jessie.

1 issue skipped by the security teams:

CVE-2018-20834: A vulnerability was found in node-tar before version 4.4.2. An Arbitrary File Overwrite issue exists when extracting a tarball containing a hardlink to a file that already exists on the system, in conjunction with a later plain file with the same name as the hardlink. This plain file content replaces the existing file content.

Please fix it.

Created: 2019-04-30 Last update: 2019-05-05 05:42

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.3.0 instead of 4.2.1).

Created: 2018-12-23 Last update: 2018-12-23 17:15

news

[2018-10-29] Accepted node-tar 4.4.6+ds1-3~bpo9+1 (source all) into stretch-backports, stretch-backports (Ross Gammon) (signed by: Praveen Arimbrathodiyil)
[2018-10-18] node-tar 4.4.6+ds1-3 MIGRATED to testing (Debian testing watch)
[2018-10-18] node-tar 4.4.6+ds1-3 MIGRATED to testing (Debian testing watch)
[2018-10-15] Accepted node-tar 4.4.6+ds1-3 (source) into unstable (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2018-10-03] node-tar 4.4.6+ds1-2 MIGRATED to testing (Debian testing watch)
[2018-09-27] Accepted node-tar 4.4.6+ds1-2 (source all) into unstable (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2018-09-21] node-tar 4.4.6+ds1-1 MIGRATED to testing (Debian testing watch)
[2018-09-16] Accepted node-tar 4.4.6+ds1-1 (source) into unstable (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2018-08-26] node-tar 4.4.4+ds1-2 MIGRATED to testing (Debian testing watch)
[2018-08-17] Accepted node-tar 4.4.4+ds1-2 (source) into unstable (Pirate Praveen) (signed by: Praveen Arimbrathodiyil)
[2018-07-19] Accepted node-tar 4.4.4+ds1-1 (source) into experimental (Jérémy Lal)
[2018-07-19] Accepted node-tar 4.4.4+ds-3 (source) into experimental (Jérémy Lal)
[2018-04-23] Accepted node-tar 4.4.1+ds-2 (source all) into experimental, experimental (Jérémy Lal)
[2016-11-24] node-tar 2.2.1-1 MIGRATED to testing (Debian testing watch)
[2016-11-18] Accepted node-tar 2.2.1-1 (source all) into unstable (Jérémy Lal)
[2015-04-27] node-tar 1.0.3-2 MIGRATED to testing (Britney)
[2015-03-15] Accepted node-tar 1.0.3-2 (source all) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2015-03-14] Accepted node-tar 1.0.3-1 (source all) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2013-09-04] node-tar 0.1.18-1 MIGRATED to testing (Debian testing watch)
[2013-08-15] Accepted node-tar 0.1.18-1 (source all) (Jérémy Lal)
[2013-03-22] Accepted node-tar 0.1.17-1 (source all) (Jérémy Lal)
[2012-03-21] Accepted node-tar 0.1.13-1 (source all) (Jérémy Lal)

bugs [bug history graph]

all: 0

links

homepage
buildd: logs, clang, reproducibility
popcon
browse source code
edit tags
security tracker
screenshots
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 4.4.6+ds1-3

Debian Package Tracker — Copyright 2013-2018 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Bugs — Git Repository — Contributing