X-Git-Url: https://git.gag.com/?p=debian%2Ftar;a=blobdiff_plain;f=debian%2Fchangelog;fp=debian%2Fchangelog;h=c885a97e545be6d2442d96342547a6ded0b6a979;hp=50bf1d2de4220654ef9eabab9d84ba2e1cb38a83;hb=1ff2f5cb0aa2b2098f6b22b8df395c6e0d12e23e;hpb=c4be0132e805fd4ce535a5cabb0169d1b5445896

diff --git a/debian/changelog b/debian/changelog
index 50bf1d2d..c885a97e 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,8 +1,11 @@
-tar (1.29b-2) UNRELEASED; urgency=medium
+tar (1.29b-1.1) unstable; urgency=medium
 
-  * add suggests tar-doc, closes: #856958
+  * Non-maintainer upload.
+  * CVE-2016-6321: Bypassing the extract path name.
+    When extracting, member names containing '..' components are skipped.
+    (Closes: #842339)
 
- -- Bdale Garbee <bdale@gag.com>  Tue, 07 Mar 2017 08:49:50 -0700
+ -- Salvatore Bonaccorso <carnil@debian.org>  Sun, 30 Oct 2016 07:35:31 +0100
 
 tar (1.29b-1) unstable; urgency=medium