GNU Tar Invalid Headers Buffer Overflow Vulnerability

GNU Tar Invalid Headers Buffer Overflow Vulnerability

Solution:
Patches are available from various vendors. Please see the referenced advisories for details.

Sun Solaris 10.0

Sun 139099-01
http://sunsolve.sun.com/search/document.do?assetkey=1-21-139099-01-1

GNU tar 1.14

Debian tar_1.14-2.1_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tar/tar_1.14-2.1_alpha. deb

Debian tar_1.14-2.1_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tar/tar_1.14-2.1_amd64. deb

Debian tar_1.14-2.1_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tar/tar_1.14-2.1_arm.de b

Debian tar_1.14-2.1_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tar/tar_1.14-2.1_hppa.d eb

Debian tar_1.14-2.1_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tar/tar_1.14-2.1_i386.d eb

Debian tar_1.14-2.1_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tar/tar_1.14-2.1_ia64.d eb

Debian tar_1.14-2.1_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tar/tar_1.14-2.1_m68k.d eb

Debian tar_1.14-2.1_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tar/tar_1.14-2.1_mips.d eb

Debian tar_1.14-2.1_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tar/tar_1.14-2.1_mipsel .deb

Debian tar_1.14-2.1_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tar/tar_1.14-2.1_powerp c.deb

Debian tar_1.14-2.1_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tar/tar_1.14-2.1_s390.d eb

Debian tar_1.14-2.1_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tar/tar_1.14-2.1_sparc. deb

Fedora Legacy tar-1.14-5.FC3.1.legacy.i386.rpm
Fedora Core 3:
http://download.fedoralegacy.org/fedora/3/updates/i386/tar-1.14-5.FC3. 1.legacy.i386.rpm

Fedora Legacy tar-1.14-5.FC3.1.legacy.x86_64.rpm
Fedora Core 3:
http://download.fedoralegacy.org/fedora/3/updates/x86_64/tar-1.14-5.FC 3.1.legacy.x86_64.rpm

Mandriva tar-1.14-1.1.101mdk.i586.rpm
Mandriva Linux 10.1:
http://wwwnew.mandriva.com/en/downloads/

Mandriva tar-1.14-1.1.101mdk.x86_64.rpm
Mandriva Linux 10.1/X86_64
http://wwwnew.mandriva.com/en/downloads/

Trustix tar-1.14-2tr.i586.rpm
TSL 3.0
ftp://ftp.trustix.org/pub/trustix/updates

Trustix tar-1.15.1-5tr.i586.rpm
TSL 3.0
ftp://ftp.trustix.org/pub/trustix/updates

Sun Solaris 9

Sun 118191-01
http://sunsolve.sun.com/search/document.do?assetkey=1-21-118191-01-1

Sun 118191-02
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118191-02-1

Sun Solaris 9_x86

Sun 118192-01
http://sunsolve.sun.com/search/document.do?assetkey=1-21-118191-01-1

Sun 118192-02
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118192-02-1

GNU tar 1.15.1

Mandriva tar-1.15.1-2.1.102mdk.i586.rpm
Mandriva Linux 10.2:
http://wwwnew.mandriva.com/en/downloads/

Mandriva tar-1.15.1-2.1.102mdk.x86_64.rpm
Mandriva Linux 10.2/X86_64:
http://wwwnew.mandriva.com/en/downloads/

Mandriva tar-1.15.1-5.1.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://wwwnew.mandriva.com/en/downloads/

Mandriva tar-1.15.1-5.1.20060mdk.x86_64.rpm
Mandriva Linux 2006.0/X86_64:
http://wwwnew.mandriva.com/en/downloads/

OpenPKG tar-1.15.1-2.3.1
OpenPKG 2.3
ftp://ftp.openpkg.org/release

OpenPKG tar-1.15.1-2.4.1
OpenPKG 2.4
ftp://ftp.openpkg.org/release

OpenPKG tar-1.15.1-2.5.1
OpenPKG 2.5
ftp://ftp.openpkg.org/release

Apple Mac OS X 10.4

Apple Mac OS X v10.4.9
http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4

Apple Mac OS X v10.4.9
http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.1

Apple Mac OS X v10.4.9
http://www.apple.com/support/downloads/

Apple Mac OS X 10.4.2

Apple Mac OS X v10.4.9
http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.3

Apple Mac OS X v10.4.9
http://www.apple.com/support/downloads/

Apple Mac OS X 10.4.3

Apple Mac OS X v10.4.9
http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.4

Apple Mac OS X v10.4.9
http://www.apple.com/support/downloads/

Apple Mac OS X 10.4.4

Apple Mac OS X v10.4.9
http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.5

Apple Mac OS X v10.4.9
http://www.apple.com/support/downloads/

Apple Mac OS X 10.4.5

Apple Mac OS X v10.4.9
http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.6

Apple Mac OS X v10.4.9
http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.7

Apple Mac OS X v10.4.9
http://www.apple.com/support/downloads/

Apple Mac OS X 10.4.7

Apple Mac OS X v10.4.9
http://www.apple.com/support/downloads/

Apple Mac OS X 10.4.8

Apple Mac OS X v10.4.9
http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.8

Apple Mac OS X v10.4.9
http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.9

Apple Security Update 2007-004 (Universal)
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=13659&cat= 1&platform=osx&method=sa/SecUpd2007-004Univ.dmg

Apple Mac OS X 10.4.9

Apple Security Update 2007-004 (Universal)
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=13659&cat= 1&platform=osx&method=sa/SecUpd2007-004Univ.dmg