Format: 1.8 Date: Tue, 05 Dec 2023 15:46:50 +1030 Source: tar Binary: tar tar-scripts Architecture: riscv64 riscv64_translations Version: 1.30+dfsg-7ubuntu0.20.04.4 Distribution: focal Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Alex Murray Description: tar - GNU version of the tar archiving utility tar-scripts - optional scripts for GNU version of the tar archiving utility Launchpad-Bugs-Fixed: 2029464 Changes: tar (1.30+dfsg-7ubuntu0.20.04.4) focal-security; urgency=medium . * SECURITY UPDATE: stack overflow via crafted xattr (LP: #2029464) - debian/patches/CVE-2023-39804.patch: allocate xattr keys and values on the heap rather than the stack in src/xheader.c - CVE-2023-39804 Checksums-Sha1: 071d68c01d48f240acabbe73348b74d3ec1486ce 706068 tar-dbgsym_1.30+dfsg-7ubuntu0.20.04.4_riscv64.ddeb e02d6824111cce26014359d8ff77dede31c0d749 9248 tar-scripts_1.30+dfsg-7ubuntu0.20.04.4_riscv64.deb 07b4265692a4660b140bc94285d3da146e31026e 6276 tar_1.30+dfsg-7ubuntu0.20.04.4_riscv64.buildinfo cdb473d96963de6121a8380da60fa7bff8eb4c87 220372 tar_1.30+dfsg-7ubuntu0.20.04.4_riscv64.deb 069dd78e38c9692d5a43ce6ad91042e9fc1bea1b 1710277 tar_1.30+dfsg-7ubuntu0.20.04.4_riscv64_translations.tar.gz Checksums-Sha256: 53f51b872c7017bfff22c7e125e897d9de5afd72e022f8625b8af46f303a6624 706068 tar-dbgsym_1.30+dfsg-7ubuntu0.20.04.4_riscv64.ddeb 7beb3461f57c9b1cbb292f9342cdbaf30515e3a7fb3dc1ebe5851b1bf6dd6e18 9248 tar-scripts_1.30+dfsg-7ubuntu0.20.04.4_riscv64.deb 9da4b88c1bc61783b35bc77b52a7c84961bef0094f4d4d518f5b7bb1d4064958 6276 tar_1.30+dfsg-7ubuntu0.20.04.4_riscv64.buildinfo defd75897d6b9c41892b72507a76a6076cfd53f0e322b446707ded6220057f64 220372 tar_1.30+dfsg-7ubuntu0.20.04.4_riscv64.deb d0734d502b3d7b7e28e3466f61c790427b16605a8a695375fcf5ec1c59656a97 1710277 tar_1.30+dfsg-7ubuntu0.20.04.4_riscv64_translations.tar.gz Files: 913779d81a04cc426f5652230dcd0965 706068 debug optional tar-dbgsym_1.30+dfsg-7ubuntu0.20.04.4_riscv64.ddeb a5ffe78ded61d0069f2f03ef2419a962 9248 utils optional tar-scripts_1.30+dfsg-7ubuntu0.20.04.4_riscv64.deb c573a5584db39d9afdb532d853b80370 6276 utils required tar_1.30+dfsg-7ubuntu0.20.04.4_riscv64.buildinfo 1621ead74c7cd9d2bc701fa93a5c1bfc 220372 utils required tar_1.30+dfsg-7ubuntu0.20.04.4_riscv64.deb 1e4d2c006da782640666de006cf40b7e 1710277 raw-translations - tar_1.30+dfsg-7ubuntu0.20.04.4_riscv64_translations.tar.gz Original-Maintainer: Bdale Garbee