crates.io/tar: medium
tar has a PAX header desynchronization issue
Action: Upgrade tar to 0.4.46 or later.
cargo update -p tar --precise 0.4.46Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.4.46 | - |
Fixed versions
| 0.4.46 |
Sources
- osv: GHSA-3pv8-6f4r-ffg2
- https://github.com/composefs/tar-rs/security/advisories/GHSA-3pv8-6f4r-ffg2
- https://github.com/composefs/tar-rs/pull/454
- https://github.com/composefs/tar-rs/commit/bab14dd84b411ac16ecb56d4f2d2f7bfb88a9838
- https://github.com/composefs/tar-rs
- https://github.com/composefs/tar-rs/releases/tag/0.4.46
published · modified · JSON