libtar-1.2.11-17.AXS4.1

エラータID: AXSA:2014-078:01

Release date: 
Tuesday, March 18, 2014 - 20:26
Subject: 
libtar-1.2.11-17.AXS4.1
Affected Channels: 
Asianux Server 4 for x86
Asianux Server 4 for x86_64
Severity: 
High
Description: 

libtar is a C library for manipulating tar archives. It supports both the strict POSIX tar format and many of the commonly-used GNU extensions.

Security issues fixed with this release:

• CVE-2013-4397
Multiple integer overflows in the th_read function in lib/block.c in libtar before 1.2.20 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) name or (2) link in an archive, which triggers a heap-based buffer overflow.

Solution: 

Update packages.

CVEs: 
CVE-2013-4397
Multiple integer overflows in the th_read function in lib/block.c in libtar before 1.2.20 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) name or (2) link in an archive, which triggers a heap-based buffer overflow.


Additional Info: 

N/A

Download: 

SRPMS
  1. libtar-1.2.11-17.AXS4.1.src.rpm
    MD5: 78a4aa545e395861d78da1c66288ff90
    SHA-256: 80666dcd342120b58446efa1749dec03fd55544f3a87daa0db0b7d31c20adab3
    Size: 326.62 kB

Asianux Server 4 for x86
  1. libtar-1.2.11-17.AXS4.1.i686.rpm
    MD5: c5ef402803645e32938a7be17a638ccb
    SHA-256: 7ea44fe172b596548352e4ac2e6450b939ea937d834f73398f27c75e551ab7fa
    Size: 29.29 kB

Asianux Server 4 for x86_64
  1. libtar-1.2.11-17.AXS4.1.x86_64.rpm
    MD5: a2966798a83699da8b181c184c84b161
    SHA-256: 8a8b55209c77ee27e788ef7517810f688c55c8b58ac94fdb88e494dbef1666fc
    Size: 28.59 kB
  2. libtar-1.2.11-17.AXS4.1.i686.rpm
    MD5: c5ef402803645e32938a7be17a638ccb
    SHA-256: 7ea44fe172b596548352e4ac2e6450b939ea937d834f73398f27c75e551ab7fa
    Size: 29.29 kB