News · via oss-security
libtar: incomplete fix for CVE-2021-33643/CVE-2021-33644 (heap out-of-bounds read)
Posted by nick on Nov 04 Hello, libtar's fix for CVE-2021-33643 and CVE-2021-33644 is incomplete. A crafted tar archive can still cause a heap out-of-bounds read, including on distro builds that…