shield Security update for tar

SUSE-SLE-SERVER-12-SP2-2016-1690

This update for tar fixes the following issues: - Fix the POINTYFEATHER vulnerability - GNU tar archiver can be tricked into extracting files and directories in the given destination, regardless of the path name(s) specified on the command line [bsc#1007188] [CVE-2016-6321] - Fix Amanda integration issue (bsc#913058)

• Release Date
  Nov 24 2016
• References
  Bugzilla: 1007188, 913058
  CVEs: CVE-2016-6321
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12.2 s390x

• Packages
  tar
  GNU implementation of tar ((t)ape (ar)chiver)

  1.27.1-11.1 lock rpm lock src

  tar-lang
  Languages for package tar

  1.27.1-11.1 lock rpm

SUSE Linux Enterprise Server 12.2 x86_64

• Packages
  tar
  GNU implementation of tar ((t)ape (ar)chiver)

  1.27.1-11.1 lock rpm lock src

  tar-lang
  Languages for package tar

  1.27.1-11.1 lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.2 ppc64le

• Packages
  tar
  GNU implementation of tar ((t)ape (ar)chiver)

  1.27.1-11.1 lock rpm lock src

  tar-lang
  Languages for package tar

  1.27.1-11.1 lock rpm

SUSE Linux Enterprise Server 12.2 aarch64

• Packages
  tar
  GNU implementation of tar ((t)ape (ar)chiver)

  1.27.1-11.1 lock rpm lock src

  tar-lang
  Languages for package tar

  1.27.1-11.1 lock rpm