Most recent entries from all

ALSA-2023:2898 — Moderate: libtar security update

2026-10-02T09:06:18.743631+00:00

Affected: AlmaLinux:8: libtar

The libtar packages contain a C library for manipulating tar archives. The library supports both the strict POSIX tar format and many of the commonly used GNU extensions.

Security Fix(es):

* libtar: out-of-bounds read in gnu_longlink (CVE-2021-33643) * libtar: out-of-bounds read in gnu_longname (CVE-2021-33644) * libtar: memory leak found in th_read() function (CVE-2021-33645) * libtar: memory leak found in th_read() function (CVE-2021-33646)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2025-05001

2026-10-02T09:06:18.743691+00:00

bdu:2025-05001

EUVD-2026-258005

2026-10-02T09:06:18.743709+00:00

EUVD-2026-258005

fkie_cve-2021-33646

2026-10-02T09:06:18.743721+00:00

The th_read() function doesn’t free a variable t->th_buf.gnu_longname after allocating memory, which may cause a memory leak.

GHSA-x27v-rjqh-f4xc

2026-10-02T09:06:18.743745+00:00

The th_read() function doesn’t free a variable t->th_buf.gnu_longname after allocating memory, which may cause a memory leak.

gsd-2021-33646

2026-10-02T09:06:18.743761+00:00

gsd-2021-33646

msrc_CVE-2021-33646 — The th_read() function doesn’t free a variable t->th_buf.gnu_longname after allocating memory which may cause a memory…

2026-10-02T09:06:18.743772+00:00

msrc_CVE-2021-33646

OESA-2022-1807 — libtar security update

2026-10-02T09:06:18.743789+00:00

Affected: openEuler:20.03-LTS-SP1: libtar, openEuler:20.03-LTS-SP3: libtar, openEuler:22.03-LTS: libtar

Libtar is a C library for manipulating POSIX tar files. It handles adding and extracting files to/from a tar archive. Requires gcc, make, and zlib. Security Fix(es): An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable gnu_longlink, causing an out-of-bounds read.(CVE-2021-33643) An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable gnu_longname, causing an out-of-bounds read.(CVE-2021-33644) The th_read() function doesn’t free a variable t->th_buf.gnu_longlink after allocating memory, which may cause a memory leak.(CVE-2021-33645) The th_read() function doesn’t free a variable t->th_buf.gnu_longname after allocating memory, which may cause a memory leak.(CVE-2021-33646)

RHSA-2023:2898 — Red Hat Security Advisory: libtar security update

2026-10-02T09:06:18.743824+00:00

libtar: out-of-bounds read in gnu_longlink libtar: out-of-bounds read in gnu_longname libtar: memory leak found in th_read() function libtar: memory leak found in th_read() function

UBUNTU-CVE-2021-33646

2026-10-02T09:06:18.743847+00:00

Affected: Ubuntu:Pro:16.04:LTS: libtar, Ubuntu:Pro:18.04:LTS: libtar, Ubuntu:20.04:LTS: libtar, Ubuntu:22.04:LTS: libtar, Ubuntu:24.04:LTS: libtar

The th_read() function doesn’t free a variable t->th_buf.gnu_longname after allocating memory, which may cause a memory leak.

WID-SEC-W-2023-1238 — Red Hat Enterprise Linux: Mehrere Schwachstellen in verschiedenen Komponenten

2026-10-02T09:06:18.743872+00:00

Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in verschiedenen Komponenten von Red Hat Enterprise Linux ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.