Security
فارسی
All products

Red Hat Enterprise Linux 6/tar

Red Hat · Package
19 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
node-tar: Process crash via PAX numeric path type confusionCVE-2026-59871 · GHSA-W8WR-V893-VJVP tarConfidential Compute Attestation/openshift-sandboxed-containers/osc-pccs npmRed Hat Medium Fix reported
node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)CVE-2026-53655 · GHSA-VMF3-W455-68VH tarConfidential Compute Attestation/openshift-sandboxed-containers/osc-pccs npmRed Hat Medium Fix reported
Race Condition in node-tar Path Reservations via Unicode Ligature Collisions on macOS APFSCVE-2026-23950 · GHSA-R6Q2-HW4H-H46W tarConfidential Compute Attestation/openshift-sandboxed-containers/osc-pccs npmRed Hat High Fix reported
node-tar is Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path SanitizationCVE-2026-23745 · GHSA-8QQ5-RM4J-MR97 tarConfidential Compute Attestation/openshift-sandboxed-containers/osc-pccs npmRed Hat High Fix reported
node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath recordsCVE-2026-59875 · GHSA-GVWX-54WH-QM9J tarConfidential Compute Attestation/openshift-sandboxed-containers/osc-pccs npmRed Hat Medium Fix reported
tar-rs `unpack_in` can chmod arbitrary directories by following symlinksCVE-2026-33056 · GHSA-J4XF-2G29-59PHVersion ranges need review. tarConfidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9 Rust / CargoRed Hat Medium Fix reported
node-tar Symlink Path Traversal via Drive-Relative LinkpathCVE-2026-31802 · GHSA-9PPJ-QMQM-Q256 tarLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-operator-bundle npmRed Hat High Fix reported
node-tar has a race condition leading to uninitialized memory exposureCVE-2025-64118 · GHSA-29XP-372Q-XQPH tarConfidential Compute Attestation/openshift-sandboxed-containers/osc-pccs npmRed Hat Medium Fix reported
tar: does not properly warn the user when extracting setuid or setgid filesCVE-2005-2541 Red Hat Enterprise Linux 10/tarRed Hat Enterprise Linux 6/tar Red Hat Medium No fix reported
tar: Bypassing the extract path nameCVE-2016-6321 Red Hat Enterprise Linux 5/tarRed Hat Enterprise Linux 6/tar Red Hat Medium No fix reported
tar: Infinite read loop in sparse_dump_region function in sparse.cCVE-2018-20482 Red Hat Enterprise Linux 5/tarRed Hat Enterprise Linux 6/tar Red Hat Low No fix reported
tar: null-pointer dereference in pax_decode_header in sparse.cCVE-2019-9923 Red Hat Enterprise Linux 6/tarRed Hat Enterprise Linux 7/tar Red Hat Low No fix reported
tar: Memory leak in read_header() in list.cCVE-2021-20193 Red Hat Enterprise Linux 6/tarRed Hat Enterprise Linux 7/tar Red Hat Medium No fix reported
tar: heap buffer overflow at from_header() in list.c via specially crafted checksumCVE-2022-48303 Red Hat Enterprise Linux 6/tarRed Hat Enterprise Linux 7/tar Red Hat Medium No fix reported
tar: Incorrectly handled extension attributes in PAX archives can lead to a crashCVE-2023-39804 Red Hat Enterprise Linux 10/tarRed Hat Enterprise Linux 6/tar Red Hat Low No fix reported
tar: Tar path traversalCVE-2025-45582 Red Hat Enterprise Linux 6/tarRed Hat Enterprise Linux 7/tar Red Hat Medium No fix reported
tar: tar: Hidden file injection via crafted archivesCVE-2026-5704 Red Hat Enterprise Linux 6/tarRed Hat Enterprise Linux 7/tar Red Hat Medium No fix reported
tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwriteCVE-2026-18508 Red Hat Enterprise Linux 6/tarRed Hat Enterprise Linux 7/tar Red Hat Medium No fix reported
tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escapeCVE-2026-18477 Red Hat Enterprise Linux 6/tarRed Hat Enterprise Linux 7/tar Red Hat Medium No fix reported