Lucene search
+L

10 matches found

Github Security Blog
Github Security Blog
added 2026/03/20 5:25 p.m.16 views

tar-rs incorrectly ignores PAX size headers if header size is nonzero

Summary As part of CVE-2025-62518 the astral-tokio-tar project was changed to correctly honor PAX size headers in the case where it was different from the base header. However, it was missed at the time that this project the original Rust tar crate had a conditional logic that skipped the PAX siz...

8.1CVSS7.4AI score0.00397EPSS
SaveExploits1References7Affected Software1
Rows per page
Query Builder