Bug#992117: buster-pu: package node-tar/4.4.6+ds1-3+deb10u1

["Adam D. Barratt" <adam@adam-barratt.org.uk>]

Control: tags -1 + confirmed

On Thu, 2021-08-12 at 00:11 +0200, Yadd wrote:
> node-tar is vulnerable to 2 CVE:
>  * #992110, CVE-2021-32803: arbitrary File Creation/Overwrite
>    vulnerability via insufficient symlink protection
>  * #992111, CVE-2021-32804: arbitrary File Creation/Overwrite
>    vulnerability due to insufficient absolute path sanitization
> 

Please go ahead.

Regards,

Adam