Ubuntu
tar package

tar 1.18-2ubuntu1.1 source package in Ubuntu

Changelog

tar (1.18-2ubuntu1.1) gutsy-security; urgency=low

  * SECURITY UPDATE: stack-based buffer overflow with malicious tar files
    - lib/paxnames.c: updated src/names.c to rewrite hash_string_prefix as
      hash_string_insert_prefix and adjust safer_name_suffix to use
      hash_string_insert_prefix to avoid stack allocation
    - patch from upstream paxlib commits:
      http://git.savannah.gnu.org/gitweb/?p=paxutils.git;a=commitdiff;h=b9199bbdefd32382953dd8c01ec881e5463c5a88
      http://git.savannah.gnu.org/gitweb/?p=paxutils.git;a=commitdiff;h=64379227940699a92113e3fd7c583e705a1f849b
    - CVE-2007-4476
    - LP: #180299

 -- Jamie Strandboge <email address hidden>   Wed, 14 Jan 2009 11:06:24 -0600

Upload details

Uploaded by:
Jamie Strandboge
Uploaded to:
Gutsy
Original maintainer:
Ubuntu Development Team
Architectures:
any
Section:
utils
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
tar_1.18.orig.tar.gz 2.3 MiB 1ccaacc5528454f4800ccbdc85b6facfdd8fb0bf5aabfe43eb596756205646e3
tar_1.18-2ubuntu1.1.diff.gz 46.0 KiB 612924f2d286cf38942643c043c6460707039512495da59c7c75dba1d5f3ddec
tar_1.18-2ubuntu1.1.dsc 679 bytes 90bb0597eec630f12b74176a40494026e39a4f9f12077ac84b54c233db927505

View changes file

Binary packages built by this source

tar: No summary available for tar in ubuntu gutsy.

No description available for tar in ubuntu gutsy.