Upgrading tar to address CVE-2006-0300

[Guest Vetri]

Hi All,

 

I amusing centos 5.8 with tar-1.15.1-31.el5(tar-1.15.1-31.el5.i386) and to address the vulnerability,I thought of upgrading the version to 1.15.91 as per the vulnerability description.

 

But when i try to upgrade,

rpm -Uvh tar-1.15.91-1mdv2007.0.i586.rpm

Preparing... ########################################### [100%]

package tar-1.15.1-31.el5.i386 (which is newer than tar-1.15.91-1mdv2007.0.i586) is already installed

 

Since I am not able to get the rpm in i386 architecture I have used rpm in i586 architecture.

 

Please help to find the exact version that this vulnerability is resolved.

 

Thanks,

 

Continue reading...