Red Hat Security AdvisoryRHSA-2010:0141
tar security update
Released 2010-03-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) tar-2:1.15.1-23.0.1.el5_4.2, tar-2:1.15.1-23.0.1.el5_4.2.i386, tar-2:1.15.1-23.0.1.el5_4.2.ia64 +1
- Red Hat Enterprise Linux AS version 4 tar-1.14-13.el4_8.1, tar-1.14-13.el4_8.1.i386, tar-1.14-13.el4_8.1.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) tar-2:1.15.1-23.0.1.el5_4.2, tar-2:1.15.1-23.0.1.el5_4.2.i386
- Red Hat Enterprise Linux Desktop version 4 tar-1.14-13.el4_8.1, tar-1.14-13.el4_8.1.i386
- Red Hat Enterprise Linux ES version 4 tar-1.14-13.el4_8.1, tar-1.14-13.el4_8.1.i386, tar-1.14-13.el4_8.1.ia64
- Red Hat Enterprise Linux WS version 4 tar-1.14-13.el4_8.1, tar-1.14-13.el4_8.1.i386, tar-1.14-13.el4_8.1.ia64
Fixes 2 records
Priority MEDIUM 49
Buffer overflow in the safer_name_suffix function in GNU tar has unspecified attack vectors and impact, resulting in a "crashing stack."
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.14902 · Published 2007-09-05 · Fixed CWE-119
Priority LOW 38
Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio before 2.11 allows remote rmt servers to cause a denial of service (memory corru…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04747 · Published 2010-03-12 · Fixed CWE-119
