tar 1.30+dfsg-7ubuntu0.20.04.4 source package in Ubuntu

Changelog

tar (1.30+dfsg-7ubuntu0.20.04.4) focal-security; urgency=medium

  * SECURITY UPDATE: stack overflow via crafted xattr (LP: #2029464)
    - debian/patches/CVE-2023-39804.patch: allocate xattr keys and values
      on the heap rather than the stack in src/xheader.c
    - CVE-2023-39804

 -- Alex Murray <email address hidden>  Tue, 05 Dec 2023 15:46:50 +1030

Upload details

Uploaded by:
Alex Murray
Uploaded to:
Focal
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
utils
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Focal updates main utils
Focal security main utils

Downloads

File Size SHA-256 Checksum
tar_1.30+dfsg.orig.tar.xz 1.8 MiB c02f3747ffe02017878303dde8b78e79cd220364c5e8048cf92320232e38912d
tar_1.30+dfsg-7ubuntu0.20.04.4.debian.tar.xz 24.0 KiB 917fb4b5743c0fe0639ee0ae430d0d64e905ba9ebe16d4a364be19a605108f8f
tar_1.30+dfsg-7ubuntu0.20.04.4.dsc 1.8 KiB 46d3612f51e97a0c464ebc632c5578285b59beddd2abd20301242b8d8a4c5d56

View changes file

Binary packages built by this source

tar: GNU version of the tar archiving utility

 Tar is a program for packaging a set of files as a single archive in tar
 format. The function it performs is conceptually similar to cpio, and to
 things like PKZIP in the DOS world. It is heavily used by the Debian package
 management system, and is useful for performing system backups and exchanging
 sets of files with others.

tar-dbgsym: debug symbols for tar
tar-scripts: optional scripts for GNU version of the tar archiving utility

 This package provides the backup, restore, backup.sh, and dump-remind
 scripts that are mentioned in the tar documentation.