USN-5900-2: tar vulnerability

22 May 2023

tar could be made to crash or expose sensitive information if it received a specially crafted file.

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Learn more about Ubuntu Pro

Releases

Packages

  • tar - GNU version of the tar archiving utility

Details

USN-5900-1 fixed vulnerabilities in tar. This update fixes it to Ubuntu 23.04.

Original advisory details:

It was discovered that tar incorrectly handled certain files.
An attacker could possibly use this issue to expose sensitive information
or cause a crash.

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Learn more about Ubuntu Pro

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 23.04

In general, a standard system update will make all the necessary changes.

References

Related notices