Debian/tar: medium 5.5
GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The iss
Action: Upgrade tar to 1.34+dfsg-1.2+deb12u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.34+dfsg-1.2+deb12u1 | - |
Fixed versions
| 1.34+dfsg-1.2+deb12u1 |
Sources
published · modified · JSON