RLSA-2023:0842

Synopsis

Moderate: tar security update

Description

The GNU tar program can save multiple files in an archive and restore files from an archive.

Security Fix(es):

* tar: heap buffer overflow at from_header() in list.c via specially crafted checksum (CVE-2022-48303)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 8 aarch64 Rocky Linux 8 x86_64

Fixes

2149722

CVEs

CVE-2022-48303

Affected packages

Rocky Linux 8 aarch64 - BaseOS

tar-2:1.30-6.el8_7.1.aarch64.rpm tar-2:1.30-6.el8_7.1.src.rpm tar-debuginfo-2:1.30-6.el8_7.1.aarch64.rpm tar-debugsource-2:1.30-6.el8_7.1.aarch64.rpm

Rocky Linux 8 x86_64 - BaseOS

tar-2:1.30-6.el8_7.1.src.rpm tar-2:1.30-6.el8_7.1.x86_64.rpm tar-debuginfo-2:1.30-6.el8_7.1.x86_64.rpm tar-debugsource-2:1.30-6.el8_7.1.x86_64.rpm