[ubuntu/jammy-security] tar 1.34+dfsg-1ubuntu0.1.22.04.3 (Accepted)

[Leonidas S. Barbosa]

tar (1.34+dfsg-1ubuntu0.1.22.04.3) jammy-security; urgency=medium

  * SECURITY UPDATE: file injection via crafted archive
    - debian/patches/CVE-2026-5704.patch: always call skip_member() after
      extraction in extract_archive(), remove conditional skip_member()
      from purge_directory(), skip directory data in skim_member(), and
      stop forcing LNKTYPE size to zero in read_header().
    - CVE-2026-5704

Date: 2026-06-25 18:58:11.809406+00:00
Changed-By: leo.barbosa at canonical.com (Leonidas S. Barbosa)
https://launchpad.net/ubuntu/+source/tar/1.34+dfsg-1ubuntu0.1.22.04.3
-------------- next part --------------
Sorry, changesfile not available.