Red Hat Security Advisory

RHSA-2023:0842

tar security update

Released 2023-02-21 · Red Hat rating Moderate · View on Red Hat →

Fixed in

TI-2022-23920 CVE-2022-48303 · GHSA-h2v4-4v4p-2qvc

MEDIUM 58

GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01493 Published 2023-01-30 Partial fix CWE-125