node-tar (1.0.3-2ubuntu0.1~esm1) xenial-security; urgency=medium

  * SECURITY UPDATE: Symlink attack in tar archive
    - debian/patches/CVE-2015-8860-1.patch: extract: normalize symbolic links
      outside root
    - debian/patches/CVE-2015-8860-2.patch: Allow ..-style symlinks that are
      well-behaved
    - debian/patches/CVE-2015-8860-2.patch: set mode explicitly so travis-ci
      is happy
    - CVE-2015-8860
 
 -- Mike Salvatore <mike.salvatore@canonical.com>  Tue, 25 Sep 2018 15:54:31 -0400

node-tar (1.0.3-2) unstable; urgency=medium

  * Merge changes from previous releases.

 -- Bas Couwenberg <sebastic@debian.org>  Sun, 15 Mar 2015 22:59:07 +0100

node-tar (1.0.3-1) unstable; urgency=low

  * Initial release (Closes: #780440)

 -- Bas Couwenberg <sebastic@debian.org>  Sat, 14 Mar 2015 01:29:10 +0100

node-tar (0.1.18-1) unstable; urgency=low

  * Upstream update
  * control:
    + tighten dependency on node-inherits (>= 2)
    + canonicalize Vcs fields
    + Standards-Version 3.9.4

 -- Jérémy Lal <kapouer@melix.org>  Thu, 15 Aug 2013 16:06:15 +0200

node-tar (0.1.17-1) experimental; urgency=low

  * Upstream update.
  * Use github url in watch file.
  * Use dh_installexamples instead of dh_installdocs.

 -- Jérémy Lal <kapouer@melix.org>  Fri, 22 Mar 2013 10:18:26 +0100

node-tar (0.1.13-1) unstable; urgency=low

  * Initial release (Closes: #664719)

 -- Jérémy Lal <kapouer@melix.org>  Sat, 17 Mar 2012 23:37:48 +0100
