Fedora 7 : tar-1.15.1-28.fc7 (2007-2673)
High Nessus Plugin ID 27789
SynopsisThe remote Fedora host is missing a security update.
Description- Wed Oct 24 2007 Radek Brich <rbrich at redhat.com> 2:1.15.1-28
- backported upstream patch for CVE-2007-4476 (tar stack crashing in safer_name_suffix)
- Tue Aug 28 2007 Radek Brich <rbrich at redhat.com> 2:1.15.1-27
- fixed CVE-2007-4131 tar directory traversal vulnerability (#253684)
Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
SolutionUpdate the affected tar and / or tar-debuginfo packages.