[ubuntu/noble-security] tar 1.35+dfsg-3ubuntu0.4 (Accepted)

Leonidas S. Barbosa leo.barbosa at canonical.com
Wed Jul 22 14:33:26 UTC 2026


tar (1.35+dfsg-3ubuntu0.4) noble-security; urgency=medium

  * SECURITY REGRESSION: Old archives with nonzero directory sizes
    failing to be extracted
    - debian/patches/CVE-2026-5704-5.patch: fix this by forcing
      the size to zero for DIRTYPE in read_header() in src/list.c
      (LP: #2161311).

Date: 2026-07-20 16:15:13.909842+00:00
Changed-By: leo.barbosa at canonical.com (Leonidas S. Barbosa)
https://launchpad.net/ubuntu/+source/tar/1.35+dfsg-3ubuntu0.4
-------------- next part --------------
Sorry, changesfile not available.


More information about the noble-changes mailing list