Summary
The GNU tar program can save multiple files in an archive and restore files from an archive.
Security Fix(es):
* tar: heap buffer overflow at from_header() in list.c via specially crafted checksum (CVE-2022-48303)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 9 | tar | 2:1.34-6.el9_1 |
Vulnerabilities 1
-
Medium 5.5
GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional ju…
References
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2149722