[Bug 137644] [NEW] [Fake sync] tar 1.18-2build1 from Debian unstable (main)

Launchpad Bug Tracker 137644 at bugs.launchpad.net
Thu Feb 17 08:47:34 UTC 2011


You have been subscribed to a public bug by Daniel Holbach (dholbach):

Binary package hint: tar

Here is a debdiff for a fake sync of tar as the orig.tar.gz don't match.

Changelog:

tar (1.18-2build1) gutsy; urgency=low

  * Fake-sync because of a different orig.tar.gz.

 -- Michael Bienia <geser at ubuntu.com>  Thu, 06 Sep 2007 00:57:45 +0200

tar (1.18-2) unstable; urgency=high

  * patch from Neil Moore improving the man page, closes: #439916
  * patch from Justin Pryzby improving the man page, closes: #433553
  * patch from upstream to fix directory traversal concern on extraction
    documented in (CVE-2007-4131), closes: #439335
  * urgency to high since preceding bug has having security implications

 -- Bdale Garbee <bdale at gag.com>  Wed, 05 Sep 2007 10:20:45 +0100

** Affects: tar (Ubuntu)
     Importance: High
     Assignee: Kees Cook (kees)
         Status: Fix Released

-- 
[Fake sync] tar 1.18-2build1 from Debian unstable (main)
https://bugs.launchpad.net/bugs/137644
You received this bug notification because you are a member of Ubuntu Sponsors Team, which is a direct subscriber.




More information about the Ubuntu-sponsors mailing list