EulerOS 2.0 SP5 : libtar (EulerOS-SA-2022-2713)

According to the versions of the libtar package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc0 for a variable...

Mageia: Security Advisory (MGASA-2022-0335)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-33644 affecting package libtar 1.2.20-10

CVE-2021-33644 affecting package libtar 1.2.20-10. A patched version of the package is available...

CVE-2021-33643 affecting package libtar 1.2.20-8

CVE-2021-33643 affecting package libtar 1.2.20-8. A patched version of the package is available...

CVE-2021-33645 affecting package libtar 1.2.20-8

CVE-2021-33645 affecting package libtar 1.2.20-8. A patched version of the package is available...

CVE-2021-33646 affecting package libtar 1.2.20-10

CVE-2021-33646 affecting package libtar 1.2.20-10. A patched version of the package is available...

MGASA-2022-0335 Updated libtar packages fix security vulnerability

An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc0 for a variable gnulonglink, causing an out-of-bounds read. CVE-2021-33643 An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger...

Updated libtar packages fix security vulnerability

An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc0 for a variable gnulonglink, causing an out-of-bounds read. CVE-2021-33643 An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger...

CVE-2021-33643 affecting package libtar for versions less than 1.2.20-10

CVE-2021-33643 affecting package libtar for versions less than 1.2.20-10. A patched version of the package is available...

CVE-2021-33645 affecting package libtar for versions less than 1.2.20-10

CVE-2021-33645 affecting package libtar for versions less than 1.2.20-10. A patched version of the package is available...

CVE-2021-33644 affecting package libtar for versions less than 1.2.20-10

CVE-2021-33644 affecting package libtar for versions less than 1.2.20-10. A patched version of the package is available...

CVE-2021-33646 affecting package libtar for versions less than 1.2.20-10

CVE-2021-33646 affecting package libtar for versions less than 1.2.20-10. A patched version of the package is available...

Fedora: Security Advisory for libtar (FEDORA-2022-44a20bba43)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 37 Update: libtar-1.2.20-25.fc37

libtar is a C library for manipulating tar archives. It supports both the strict POSIX tar format and many of the commonly-used GNU extensions...

Fedora: Security Advisory for libtar (FEDORA-2022-50e8a1b51d)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for libtar (FEDORA-2022-fe1a4e3cf0)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: libtar-1.2.20-25.fc35

libtar is a C library for manipulating tar archives. It supports both the strict POSIX tar format and many of the commonly-used GNU extensions...

[SECURITY] Fedora 36 Update: libtar-1.2.20-25.fc36

libtar is a C library for manipulating tar archives. It supports both the strict POSIX tar format and many of the commonly-used GNU extensions...

CVE-2021-33646

A flaw was found in libtar. This security vulnerability occurs because the thread function in libtar doesn’t free a variable t-thbuf.gnulongname after allocating memory, which may cause a memory leak...

CVE-2021-33645

A flaw was found in libtar. This security vulnerability occurs because the thread function in libtar doesn’t free a variable t-thbuf.gnulonglink after allocating memory, which may cause a memory leak...