REDHAT-BUG-1917565
First published: Mon Jan 18 2021(Updated: )
An issue was discovered in GNU Tar 1.33 and earlier. There is a memory leak in read_header() in list.c in the tar application. Upstream bug: <a href="https://savannah.gnu.org/bugs/?59897">https://savannah.gnu.org/bugs/?59897</a> Upstream patch: <a href="https://git.savannah.gnu.org/cgit/tar.git/commit/?id=d9d4435692150fa8ff68e1b1a473d187cc3fd777">https://git.savannah.gnu.org/cgit/tar.git/commit/?id=d9d4435692150fa8ff68e1b1a473d187cc3fd777</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ubuntu tar | <1.33 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://savannah.gnu.org/bugs/?59897
- https://git.savannah.gnu.org/cgit/tar.git/commit/?id=d9d4435692150fa8ff68e1b1a473d187cc3fd777
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=1748610
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=1748610&action=edit
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1917631
- https://bugzilla.redhat.com/show_bug.cgi?id=1917565
Frequently Asked Questions
What is the severity of REDHAT-BUG-1917565?
The severity of REDHAT-BUG-1917565 is classified as a memory leak in GNU Tar versions 1.33 and earlier.
How do I fix REDHAT-BUG-1917565?
To fix REDHAT-BUG-1917565, update GNU Tar to a version later than 1.33 that includes the patch for this issue.
What versions of GNU Tar are affected by REDHAT-BUG-1917565?
GNU Tar versions 1.33 and earlier are affected by REDHAT-BUG-1917565.
What component of GNU Tar is involved in REDHAT-BUG-1917565?
The component involved in REDHAT-BUG-1917565 is the read_header() function in list.c.
Is there an upstream patch for REDHAT-BUG-1917565?
Yes, there is an upstream patch available to address REDHAT-BUG-1917565.
- agent/references
- agent/type
- agent/first-publish-date
- agent/severity
- agent/description
- agent/event
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2021-20193
- agent/last-modified-date
- agent/trending
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/gnu
- canonical/ubuntu tar