Upgrading tar to address CVE-2006-0300

Hi All,

I amusing centos 5.8 with tar-1.15.1-31.el5(tar-1.15.1-31.el5.i386) and to address the vulnerability,I thought of upgrading the version to 1.15.91 as per the vulnerability description.

But when i try to upgrade,

rpm -Uvh tar-1.15.91-1mdv2007.0.i586.rpm

Preparing... ########################################### [100%]

package tar-1.15.1-31.el5.i386 (which is newer than tar-1.15.91-1mdv2007.0.i586) is already installed

Since I am not able to get the rpm in i386 architecture I have used rpm in i586 architecture.

Please help to find the exact version that this vulnerability is resolved.

Thanks,

Continue reading...