Lucene search

Moderate: tar security update

🗓️ 21 Feb 2023 00:00:00Reported by AlmaLinuxType

almalinux🔗 errata.almalinux.org👁 25 Views

Moderate security update for GNU tar program

Reporter	Title	Published	Views	Family All 165
IBM Security Bulletins	Security Bulletin: A vulnerability in tar package affects Data Replication on Cloud Pak for Data	7 Nov 202321:10	–	ibm
IBM Security Bulletins	Security Bulletin: CVE-2022-48303 may affect IBM CICS TX Advanced 10.1	8 Jun 202318:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance is vulnerable to heap-based buffer overflow (CVE-2022-48303)	28 Jun 202312:55	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in GNU Tar affects IBM MQ Operator and Queue manager container images (CVE-2022-48303)	30 Mar 202316:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a heap-based buffer overflow in GNU Tar (CVE-2022-48303)	3 May 202314:11	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in GNU Tar may affect IBM Robotic Process Automation for Cloud Pak and result in a buffer overflow (CVE-2022-48303)	1 May 202314:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to Node.js bl modules denial of service vulnerability( CVE-2020-8244) and GNU Tar buffer overflow vulnerability( CVE-2022-48303)	6 Jul 202318:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge v4.8.7 is vulnerable to multiple Operator package issues	30 Jan 202522:50	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insights 1.6.10 addresses multiple security vulnerabilities.	27 Sep 202321:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Base OS issues	17 Oct 202400:12	–	ibm

Source	Link
access	www.access.redhat.com/errata/RHSA-2023:0842
access	www.access.redhat.com/security/cve/CVE-2022-48303
bugzilla	www.bugzilla.redhat.com/2149722
errata	www.errata.almalinux.org/8/ALSA-2023-0842.html

OS	OS Version	Architecture	Package	Package Version	Filename
almalinux	8	x86_64	tar	1.30-6.el8_7.1	tar-1.30-6.el8_7.1.x86_64.rpm
almalinux	8	aarch64	tar	1.30-6.el8_7.1	tar-1.30-6.el8_7.1.aarch64.rpm
almalinux	8	ppc64le	tar	1.30-6.el8_7.1	tar-1.30-6.el8_7.1.ppc64le.rpm
almalinux	8	s390x	tar	1.30-6.el8_7.1	tar-1.30-6.el8_7.1.s390x.rpm

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 Feb 2023 00:00Current

8.2High risk

Vulners AI Score8.2

CVSS35.5

EPSS0.00067