Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2021:0494-1

Опубликовано: 02 апр. 2021
Источник: suse-cvrf

Описание

Security update for tar

This update for tar fixes the following issues:

CVE-2021-20193: Memory leak in read_header() in list.c (bsc#1181131)

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.2
tar-1.30-lp152.4.3.1
tar-backup-scripts-1.30-lp152.4.3.1
tar-doc-1.30-lp152.4.3.1
tar-lang-1.30-lp152.4.3.1
tar-rmt-1.30-lp152.4.3.1
tar-tests-1.30-lp152.4.3.1

Ссылки

Описание

A flaw was found in the src/list.c of tar 1.33 and earlier. This flaw allows an attacker who can submit a crafted input file to tar to cause uncontrolled consumption of memory. The highest threat from this vulnerability is to system availability.

Затронутые продукты
openSUSE Leap 15.2:tar-1.30-lp152.4.3.1
openSUSE Leap 15.2:tar-backup-scripts-1.30-lp152.4.3.1
openSUSE Leap 15.2:tar-doc-1.30-lp152.4.3.1
openSUSE Leap 15.2:tar-lang-1.30-lp152.4.3.1
Ссылки