[CLSA-2026:1791283518] tar: Fix of CVE-2023-39804
Type:
security
Severity:
Low
Release date:
2026-10-06 10:45:30 UTC
Description:
- CVE-2023-39804: stack overflow in xattr_decoder() on a large PAX xattr value
CVEs fixed:
Updated packages:
  • tar-1.34-13.el9_8.tuxcare.els1.aarch64.rpm
    sha:4f322d31b779cee912e5115ad5445d831a5a6f199080b0f26391fa807d595c58
  • tar-1.34-13.el9_8.tuxcare.els1.i686.rpm
    sha:661b2d0168b2114e4e12883b7a547e3638c0f19cfc21ed7948d2905d72dc3b28
  • tar-1.34-13.el9_8.tuxcare.els1.x86_64.rpm
    sha:e3bdad170e838a73a079b805500365390cafa9628235de07d9b452e688036f68
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.