X-Git-Url: https://git.gag.com/?a=blobdiff_plain;f=debian%2Fchangelog;h=c885a97e545be6d2442d96342547a6ded0b6a979;hb=1ff2f5cb0aa2b2098f6b22b8df395c6e0d12e23e;hp=fed47e67705c6240b42fa8b7225ece59bb66bd81;hpb=5704aeb8a496b8562f4e9c37b064758913311a7e;p=debian%2Ftar diff --git a/debian/changelog b/debian/changelog index fed47e67..c885a97e 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,8 +1,20 @@ -tar (1.29-2) unstable; urgency=medium +tar (1.29b-1.1) unstable; urgency=medium + * Non-maintainer upload. + * CVE-2016-6321: Bypassing the extract path name. + When extracting, member names containing '..' components are skipped. + (Closes: #842339) + + -- Salvatore Bonaccorso Sun, 30 Oct 2016 07:35:31 +0100 + +tar (1.29b-1) unstable; urgency=medium + + * re-constitute the 1.29 orig.tar with man pages as version 1.29b * re-enable parallel builds and increase build verbosity, closes: #824631 + * switch to man pages provided by upstream since 1.28, closes: #827017, + #391714, #473228, #524819, #711725, #720877, #766016, #779795. - -- Bdale Garbee Tue, 31 May 2016 11:55:12 -0600 + -- Bdale Garbee Fri, 22 Jul 2016 13:13:55 -0600 tar (1.29-1) unstable; urgency=medium