SUSE-SU-2016:2895-1

Import Source

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2016:2895-1

Related

Published

2016-11-24T07:36:08Z

Modified

2016-11-24T07:36:08Z

Summary

Security update for tar

Details

This update for tar fixes the following issues:

Fix the POINTYFEATHER vulnerability - GNU tar archiver can be tricked into extracting files and directories in the given destination, regardless of the path name(s) specified on the command line [bsc#1007188] [CVE-2016-6321]

References

Affected packages

Name: tar
Purl: purl:rpm/suse/tar&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.26-1.2.10.1

{
    "binaries": [
        {
            "tar": "1.26-1.2.10.1"
        }
    ]
}

Name: tar
Purl: purl:rpm/suse/tar&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.26-1.2.10.1

{
    "binaries": [
        {
            "tar": "1.26-1.2.10.1"
        }
    ]
}