[ubuntu/resolute-security] tar 1.35+dfsg-4ubuntu0.1 (Accepted)

[Leonidas S. Barbosa]

tar (1.35+dfsg-4ubuntu0.1) resolute-security; urgency=medium

  * SECURITY UPDATE: file injection via crafted archive
    - debian/patches/CVE-2026-5704.patch: always call skip_member() after
      extraction in src/extract.c, fix skim_member() to skip directory data
      in src/list.c, remove conditional skip_member() call from
      purge_directory in src/incremen.c
    - CVE-2026-5704

Date: 2026-06-23 14:12:15.548867+00:00
Changed-By: leo.barbosa at canonical.com (Leonidas S. Barbosa)
https://launchpad.net/ubuntu/+source/tar/1.35+dfsg-4ubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.