Description
A flaw was discovered in the mholt/archiver package. This flaw allows an attacker to create a specially crafted tar file, which, when unpacked, may allow access to restricted files or directories. This issue can allow the creation or overwriting of files with the user's or application's privileges using the library.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
archiver
Default version status: unaffected
v3.0.0 to < *affectedv4.0.0 to < *unaffected
Red Hat Red Hat OpenShift Container Platform 4.18
Default version status: affected
v4.18.0-202503051333.p0.g22b273d.assembly.stream.el9 to < *unaffected
Red Hat Red Hat Advanced Cluster Security 3
Default version status: affected
Red Hat Red Hat Advanced Cluster Security 3
Default version status: affected
Red Hat Red Hat Advanced Cluster Security 3
Default version status: affected
Red Hat Red Hat Advanced Cluster Security 4
Default version status: unaffected
Red Hat Red Hat Advanced Cluster Security 4
Default version status: unaffected
Red Hat Red Hat Advanced Cluster Security 4
Default version status: unaffected