CVE-2022-48303

Summary: CVE-2022-48303 affects GNU tar up to version 1.34, with a one-byte out-of-bounds read in from_header/list.c for V7 archives where mtime has ~11 whitespace characters. This can cause use of uninitialized memory and a conditional jump; exploitation to alter control flow has not been demons...