SUSE CVE-2015-2046

Cross-site scripting XSS vulnerability in MantisBT 1.2.13 and later before 1.2.20...

AZL-34950 CVE-2021-33640 affecting package libtar for versions less than 1.2.20-11

After tarclose, libtar.c releases the memory pointed to by pointer t. After tarclose is called in the list function, it continues to use pointer t: freelonglinklongnamet-thbuf . As a result, the released memory is used use-after-free...

AZL-10545 CVE-2021-33646 affecting package libtar for versions less than 1.2.20-10

The thread function doesn’t free a variable t-thbuf.gnulongname after allocating memory, which may cause a memory leak...