{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cp\u003eDistributions int\u00e9grant \u003cSPAN class=\n  \"textit\"\u003eGNU tar version 1.16, 1.15.1\u003c/SPAN\u003e et probablement des  versions ant\u00e9rieures.\u003c/p\u003e",
  "content": "## Description\n\nUn attaquant peut construire une archive tar malveillante avec un lien\nsymbolique qui n\u0027est pas correctement trait\u00e9 par les fonctions\nextract_archive du fichier source extract.c et extract_mangle du fichier\nsourcemangle.c. L\u0027attaquant pourra \u00e9crire ou \u00e9craser des fichiers \u00e0 un\nendroit arbitraire sur le syst\u00e8me vuln\u00e9rable, dans le contexte de\nl\u0027utilisateur qui manipulera cette archive.\n\n  \n  \n\nUn code prouvant la faisabilit\u00e9 de l\u0027attaque circule sur l\u0027Internet.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2006-6097",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-6097"
    }
  ],
  "initial_release_date": "2006-11-29T00:00:00",
  "last_revision_date": "2007-01-25T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Debian DSA-1223 du 01 d\u00e9cembre 2006 :",
      "url": "http://www.debian.org/security/2006/dsa-1223"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Gentoo GLSA-200612-10 du 11 d\u00e9cembre    2006 :",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200612-10.xml"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2006:0749 du 19 d\u00e9cembre    2006 :",
      "url": "http://rhn.redhat.com/errata/RHSA-2006-0749.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Mandriva MDKSA-2006:219 du 28 novembre    2006 :",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:219"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Avaya ASA-2007-015 du 24 janvier 2007    :",
      "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-015.htm"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-385-1 du 27 novembre 2006 :",
      "url": "http://www.ubuntu.com/usn/usn-385-1"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 FreeBSD SA-06:26 du 06 d\u00e9cembre 2006 :",
      "url": "http://security.freebsd.org/advisories/FreeBSD-SA-06:26.gtar.asc"
    }
  ],
  "reference": "CERTA-2006-AVI-516",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2006-11-29T00:00:00.000000"
    },
    {
      "description": "ajout des r\u00e9f\u00e9rences aux bulletins de s\u00e9curit\u00e9 Red Hat, Gentoo, Debian, FreeBSD.",
      "revision_date": "2006-12-20T00:00:00.000000"
    },
    {
      "description": "ajout du bulletin de s\u00e9curit\u00e9 concernant les produits Avaya.",
      "revision_date": "2007-01-25T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "Un attaquant peut \u00e9crire ou \u00e9craser des fichiers existants \u00e0 l\u0027aide\nd\u0027une archive au format tar.\n",
  "title": "Vuln\u00e9rabilit\u00e9 de GNU tar",
  "vendor_advisories": []
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "MacOS X 10.3.9 et MacOS X Server 10.3.9 ;",
      "product": {
        "name": "macOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "MacOS X 10.4 et MacOS X Server 10.4.",
      "product": {
        "name": "macOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nPlusieurs composants de MacOS X sont sujets \u00e0 des vuln\u00e9rabilit\u00e9s, les\nplus graves permettant \u00e0 un attaquant distant d\u0027ex\u00e9cuter du code\narbitraire.  \n\nLes composants impact\u00e9s sont : ColorSync (CVE-2007-0719), CoreGraphics,\nCrash Reporter (CVE-2007-0467), CUPS (CVE-2007-0720), Disk Images\n(CVE-2007-0721, CVE-2007-0722, CVE-2006-6061, CVE-2006-6062,\nCVE-2006-5679, CVE-2007-0229, CVE-2007-0267, CVE-2007-0299), DS Plug-Ins\n(CVE-2007-0723), Flash Player (CVE-2006-5330), GNU Tar (CVE-2006-0300,\nCVE-2006-6097), HFS (CVE-2007-0318), HID Family (CVE-2007-0724), ImageIO\n(CVE-2007-1071, CVE-2007-0733), Kernel (CVE-2006-5836, CVE-2006-6129,\nCVE-2006-6173), MySQL Server (CVE-2006-1516, CVE-2006-1517,\nCVE-2006-2753, CVE-2006-3081, CVE-2006-4031, CVE-2006-4226,\nCVE-2006-3469), Networking (CVE-2006-6130, CVE-2007-0236), OpenSSH\n(CVE-2007-0726, CVE-2006-0225, CVE-2006-4924, CVE-2006-5051,\nCVE-2006-5052), Printing (CVE-2007-0728), QuickDraw Manager\n(CVE-2007-0588), servermgrd (CVE-2007-0730), SMB File Server\n(CVE-2007-0731), Software Update (CVE-2007-0463), sudo (CVE-2005-2959),\nWebLog (CVE-2006-4829).\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2006-3469",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-3469"
    },
    {
      "name": "CVE-2006-6061",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-6061"
    },
    {
      "name": "CVE-2006-2753",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-2753"
    },
    {
      "name": "CVE-2007-0722",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0722"
    },
    {
      "name": "CVE-2007-0229",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0229"
    },
    {
      "name": "CVE-2006-6173",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-6173"
    },
    {
      "name": "CVE-2007-0733",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0733"
    },
    {
      "name": "CVE-2006-5836",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-5836"
    },
    {
      "name": "CVE-2007-0720",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0720"
    },
    {
      "name": "CVE-2006-5052",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-5052"
    },
    {
      "name": "CVE-2006-3081",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-3081"
    },
    {
      "name": "CVE-2007-0318",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0318"
    },
    {
      "name": "CVE-2007-0236",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0236"
    },
    {
      "name": "CVE-2006-4829",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-4829"
    },
    {
      "name": "CVE-2006-1517",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-1517"
    },
    {
      "name": "CVE-2006-4924",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-4924"
    },
    {
      "name": "CVE-2005-2959",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-2959"
    },
    {
      "name": "CVE-2007-0728",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0728"
    },
    {
      "name": "CVE-2006-6129",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-6129"
    },
    {
      "name": "CVE-2007-0267",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0267"
    },
    {
      "name": "CVE-2007-0731",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0731"
    },
    {
      "name": "CVE-2007-0726",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0726"
    },
    {
      "name": "CVE-2006-4226",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-4226"
    },
    {
      "name": "CVE-2007-0299",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0299"
    },
    {
      "name": "CVE-2007-0724",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0724"
    },
    {
      "name": "CVE-2007-1071",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-1071"
    },
    {
      "name": "CVE-2006-4031",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-4031"
    },
    {
      "name": "CVE-2007-0588",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0588"
    },
    {
      "name": "CVE-2006-1516",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-1516"
    },
    {
      "name": "CVE-2006-5679",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-5679"
    },
    {
      "name": "CVE-2007-0721",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0721"
    },
    {
      "name": "CVE-2006-6130",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-6130"
    },
    {
      "name": "CVE-2006-5330",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-5330"
    },
    {
      "name": "CVE-2007-0730",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0730"
    },
    {
      "name": "CVE-2006-0300",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-0300"
    },
    {
      "name": "CVE-2007-0719",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0719"
    },
    {
      "name": "CVE-2006-6062",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-6062"
    },
    {
      "name": "CVE-2006-0225",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-0225"
    },
    {
      "name": "CVE-2006-5051",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-5051"
    },
    {
      "name": "CVE-2007-0467",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0467"
    },
    {
      "name": "CVE-2007-0463",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0463"
    },
    {
      "name": "CVE-2006-6097",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-6097"
    },
    {
      "name": "CVE-2007-0723",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0723"
    }
  ],
  "initial_release_date": "2007-03-14T00:00:00",
  "last_revision_date": "2007-03-14T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Apple du 12 mars 2007 :",
      "url": "http://docs.info.apple.com/article.html?artnum=305214"
    }
  ],
  "reference": "CERTA-2007-AVI-124",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2007-03-14T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    },
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "Plusieurs vuln\u00e9rabilit\u00e9s affectent MacOS X. Les plus graves permettent \u00e0\nune personne malintentionn\u00e9e d\u0027ex\u00e9cuter du code arbitraire \u00e0 distance.\n",
  "title": "Vuln\u00e9rabilit\u00e9s dans MacOS X",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Mise \u00e0 jour de s\u00e9curit\u00e9 2007-003 de MacOS X",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "VMware ESX Server 2.x ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware ESX Server 3.x.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nDe multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans VMware ESX Server.\nCes vuln\u00e9rabilit\u00e9s peuvent \u00eatre exploit\u00e9es par un utilisateur\nmalintentionn\u00e9 afin de conduire des d\u00e9nis de service, de contourner la\npolitique de s\u00e9curit\u00e9 mise en place, ou d\u0027ex\u00e9cuter du code arbitraire \u00e0\ndistance afin de prendre le contr\u00f4le total de la machine h\u00e9bergeant le\nservice vuln\u00e9rable.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2006-4334",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-4334"
    },
    {
      "name": "CVE-2006-4335",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-4335"
    },
    {
      "name": "CVE-2006-3740",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-3740"
    },
    {
      "name": "CVE-2006-4336",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-4336"
    },
    {
      "name": "CVE-2006-3739",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-3739"
    },
    {
      "name": "CVE-2006-4337",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-4337"
    },
    {
      "name": "CVE-2006-4338",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-4338"
    },
    {
      "name": "CVE-2006-6097",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-6097"
    }
  ],
  "initial_release_date": "2007-04-03T00:00:00",
  "last_revision_date": "2007-04-03T00:00:00",
  "links": [
    {
      "title": "Bulletin de mise \u00e0 jour de l\u0027\u00e9diteur du 30 mars 2007:",
      "url": "http://kb.vmware.com/kb/3496682"
    },
    {
      "title": "Bulletin de mise \u00e0 jour de l\u0027\u00e9diteur du 30 mars 2007:",
      "url": "http://kb.vmware.com/kb/5031800"
    },
    {
      "title": "Site de l\u0027\u00e9diteur :",
      "url": "http://www.vmware.com"
    },
    {
      "title": "Bulletin de mise \u00e0 jour de l\u0027\u00e9diteur du 30 mars 2007:",
      "url": "http://kb.vmware.com/kb/3194055"
    },
    {
      "title": "Bulletin de mise \u00e0 jour de l\u0027\u00e9diteur du 30 mars 2007:",
      "url": "http://kb.vmware.com/kb/3003211"
    },
    {
      "title": "Bulletin de mise \u00e0 jour de l\u0027\u00e9diteur du 30 mars 2007:",
      "url": "http://kb.vmware.com/kb/6856573"
    },
    {
      "title": "Bulletin de mise \u00e0 jour de l\u0027\u00e9diteur du 30 mars 2007:",
      "url": "http://kb.vmware.com/kb/5885387"
    }
  ],
  "reference": "CERTA-2007-AVI-154",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2007-04-03T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": null,
  "title": "Multiples vuln\u00e9rabilit\u00e9s de VMware ESX Server",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de mise \u00e0 jour de VMware",
      "url": null
    }
  ]
}

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:gnu:tar:1.15.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "B8B4A20D-AAD0-4857-AC0F-D221EBB08BFD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:tar:1.16:*:*:*:*:*:*:*",
              "matchCriteriaId": "7B6D83BA-6C85-43F3-87FD-A77CC6F1D21A",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite arbitrary files via a tar file that contains a GNUTYPE_NAMES record with a symbolic link, which is not properly handled by the extract_archive function in extract.c and extract_mangle function in mangle.c, a variant of CVE-2002-1216."
    },
    {
      "lang": "es",
      "value": "GNU tar 1.16 y 1.15.1, y posiblemente otras versiones, permiten a un atacante con la intervenci\u00f3n del usuario sobreescribir ficheros de su elecci\u00f3n a trav\u00e9s del fichero tar que contiene un registro GNUTYPE_NAMES con un enlace simb\u00f3lico, lo cual no se maneja de forma adecuada por la funci\u00f3n extract_archive en extract.c y la funci\u00f3n extract_mangle en mangle.c, un variante de CVE-2002-1216."
    }
  ],
  "id": "CVE-2006-6097",
  "lastModified": "2026-04-23T00:35:47.467",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "HIGH",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 4.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 4.9,
        "impactScore": 4.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ]
  },
  "published": "2006-11-24T18:07:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "ftp://patches.sgi.com/support/free/security/advisories/20061202-01-P.asc"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://docs.info.apple.com/article.html?artnum=305214"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://kb.vmware.com/KanisaPlatform/Publishing/817/2240267_f.SAL_Public.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050812.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://rhn.redhat.com/errata/RHSA-2006-0749.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/23115"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/23117"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/23142"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/23146"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/23163"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/23173"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/23198"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/23209"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/23314"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/23443"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/23514"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/23911"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/24479"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/24636"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://security.freebsd.org/advisories/FreeBSD-SA-06:26.gtar.asc"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://security.gentoo.org/glsa/glsa-200612-10.xml"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securityreason.com/securityalert/1918"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securitytracker.com/id?1017423"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.469379"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-015.htm"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.debian.org/security/2006/dsa-1223"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:219"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.038.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/453286/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/464268/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.securityfocus.com/bid/21235"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.trustix.org/errata/2006/0068/"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.ubuntu.com/usn/usn-385-1"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.us-cert.gov/cas/techalerts/TA07-072A.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2006/4717"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2006/5102"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2007/0930"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2007/1171"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=216937"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://issues.rpath.com/browse/RPL-821"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10963"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "ftp://patches.sgi.com/support/free/security/advisories/20061202-01-P.asc"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://docs.info.apple.com/article.html?artnum=305214"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://kb.vmware.com/KanisaPlatform/Publishing/817/2240267_f.SAL_Public.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050812.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://rhn.redhat.com/errata/RHSA-2006-0749.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/23115"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/23117"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/23142"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/23146"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/23163"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/23173"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/23198"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/23209"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/23314"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/23443"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/23514"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/23911"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/24479"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/24636"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://security.freebsd.org/advisories/FreeBSD-SA-06:26.gtar.asc"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://security.gentoo.org/glsa/glsa-200612-10.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securityreason.com/securityalert/1918"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1017423"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.469379"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-015.htm"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2006/dsa-1223"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:219"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.038.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/453286/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/464268/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.securityfocus.com/bid/21235"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.trustix.org/errata/2006/0068/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ubuntu.com/usn/usn-385-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.us-cert.gov/cas/techalerts/TA07-072A.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2006/4717"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2006/5102"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2007/0930"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2007/1171"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=216937"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://issues.rpath.com/browse/RPL-821"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10963"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vendorComments": [
    {
      "comment": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
      "lastModified": "2007-03-14T00:00:00",
      "organization": "Red Hat"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2006-6097"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2006-11-24T18:07:00Z",
    "severity": "MODERATE"
  },
  "details": "GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite arbitrary files via a tar file that contains a GNUTYPE_NAMES record with a symbolic link, which is not properly handled by the extract_archive function in extract.c and extract_mangle function in mangle.c, a variant of CVE-2002-1216.",
  "id": "GHSA-f4p7-cvff-gr4c",
  "modified": "2022-05-03T03:16:43Z",
  "published": "2022-05-03T03:16:43Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-6097"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=216937"
    },
    {
      "type": "WEB",
      "url": "https://issues.rpath.com/browse/RPL-821"
    },
    {
      "type": "WEB",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10963"
    },
    {
      "type": "WEB",
      "url": "http://docs.info.apple.com/article.html?artnum=305214"
    },
    {
      "type": "WEB",
      "url": "http://kb.vmware.com/KanisaPlatform/Publishing/817/2240267_f.SAL_Public.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050812.html"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2006-0749.html"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/23115"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/23117"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/23142"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/23146"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/23163"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/23173"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/23198"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/23209"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/23314"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/23443"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/23514"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/23911"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24479"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24636"
    },
    {
      "type": "WEB",
      "url": "http://security.freebsd.org/advisories/FreeBSD-SA-06:26.gtar.asc"
    },
    {
      "type": "WEB",
      "url": "http://security.gentoo.org/glsa/glsa-200612-10.xml"
    },
    {
      "type": "WEB",
      "url": "http://securityreason.com/securityalert/1918"
    },
    {
      "type": "WEB",
      "url": "http://securitytracker.com/id?1017423"
    },
    {
      "type": "WEB",
      "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.469379"
    },
    {
      "type": "WEB",
      "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-015.htm"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2006/dsa-1223"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:219"
    },
    {
      "type": "WEB",
      "url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.038.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/453286/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/464268/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/21235"
    },
    {
      "type": "WEB",
      "url": "http://www.trustix.org/errata/2006/0068"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/usn-385-1"
    },
    {
      "type": "WEB",
      "url": "http://www.us-cert.gov/cas/techalerts/TA07-072A.html"
    },
    {
      "type": "WEB",
      "url": "http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2006/4717"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2006/5102"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2007/0930"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2007/1171"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

{
  "GSD": {
    "alias": "CVE-2006-6097",
    "description": "GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite arbitrary files via a tar file that contains a GNUTYPE_NAMES record with a symbolic link, which is not properly handled by the extract_archive function in extract.c and extract_mangle function in mangle.c, a variant of CVE-2002-1216.",
    "id": "GSD-2006-6097",
    "references": [
      "https://www.suse.com/security/cve/CVE-2006-6097.html",
      "https://www.debian.org/security/2006/dsa-1223",
      "https://access.redhat.com/errata/RHSA-2006:0749",
      "https://linux.oracle.com/cve/CVE-2006-6097.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2006-6097"
      ],
      "details": "GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite arbitrary files via a tar file that contains a GNUTYPE_NAMES record with a symbolic link, which is not properly handled by the extract_archive function in extract.c and extract_mangle function in mangle.c, a variant of CVE-2002-1216.",
      "id": "GSD-2006-6097",
      "modified": "2023-12-13T01:19:53.988438Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2006-6097",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite arbitrary files via a tar file that contains a GNUTYPE_NAMES record with a symbolic link, which is not properly handled by the extract_archive function in extract.c and extract_mangle function in mangle.c, a variant of CVE-2002-1216."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "23117",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/23117"
          },
          {
            "name": "oval:org.mitre.oval:def:10963",
            "refsource": "OVAL",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10963"
          },
          {
            "name": "https://issues.rpath.com/browse/RPL-821",
            "refsource": "CONFIRM",
            "url": "https://issues.rpath.com/browse/RPL-821"
          },
          {
            "name": "1918",
            "refsource": "SREASON",
            "url": "http://securityreason.com/securityalert/1918"
          },
          {
            "name": "TA07-072A",
            "refsource": "CERT",
            "url": "http://www.us-cert.gov/cas/techalerts/TA07-072A.html"
          },
          {
            "name": "21235",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/21235"
          },
          {
            "name": "23146",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/23146"
          },
          {
            "name": "20061121 GNU tar directory traversal",
            "refsource": "FULLDISC",
            "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050812.html"
          },
          {
            "name": "http://kb.vmware.com/KanisaPlatform/Publishing/817/2240267_f.SAL_Public.html",
            "refsource": "CONFIRM",
            "url": "http://kb.vmware.com/KanisaPlatform/Publishing/817/2240267_f.SAL_Public.html"
          },
          {
            "name": "APPLE-SA-2007-03-13",
            "refsource": "APPLE",
            "url": "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html"
          },
          {
            "name": "23209",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/23209"
          },
          {
            "name": "http://docs.info.apple.com/article.html?artnum=305214",
            "refsource": "CONFIRM",
            "url": "http://docs.info.apple.com/article.html?artnum=305214"
          },
          {
            "name": "ADV-2006-5102",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2006/5102"
          },
          {
            "name": "2006-0068",
            "refsource": "TRUSTIX",
            "url": "http://www.trustix.org/errata/2006/0068/"
          },
          {
            "name": "23142",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/23142"
          },
          {
            "name": "23314",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/23314"
          },
          {
            "name": "ADV-2007-1171",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2007/1171"
          },
          {
            "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-015.htm",
            "refsource": "CONFIRM",
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-015.htm"
          },
          {
            "name": "GLSA-200612-10",
            "refsource": "GENTOO",
            "url": "http://security.gentoo.org/glsa/glsa-200612-10.xml"
          },
          {
            "name": "23198",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/23198"
          },
          {
            "name": "23115",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/23115"
          },
          {
            "name": "http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html",
            "refsource": "CONFIRM",
            "url": "http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html"
          },
          {
            "name": "20061201 rPSA-2006-0222-1 tar",
            "refsource": "BUGTRAQ",
            "url": "http://www.securityfocus.com/archive/1/453286/100/0/threaded"
          },
          {
            "name": "23911",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/23911"
          },
          {
            "name": "20061202-01-P",
            "refsource": "SGI",
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20061202-01-P.asc"
          },
          {
            "name": "USN-385-1",
            "refsource": "UBUNTU",
            "url": "http://www.ubuntu.com/usn/usn-385-1"
          },
          {
            "name": "20070330 VMSA-2007-0002 VMware ESX security updates",
            "refsource": "BUGTRAQ",
            "url": "http://www.securityfocus.com/archive/1/464268/100/0/threaded"
          },
          {
            "name": "23173",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/23173"
          },
          {
            "name": "RHSA-2006:0749",
            "refsource": "REDHAT",
            "url": "http://rhn.redhat.com/errata/RHSA-2006-0749.html"
          },
          {
            "name": "FreeBSD-SA-06:26",
            "refsource": "FREEBSD",
            "url": "http://security.freebsd.org/advisories/FreeBSD-SA-06:26.gtar.asc"
          },
          {
            "name": "1017423",
            "refsource": "SECTRACK",
            "url": "http://securitytracker.com/id?1017423"
          },
          {
            "name": "24636",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/24636"
          },
          {
            "name": "DSA-1223",
            "refsource": "DEBIAN",
            "url": "http://www.debian.org/security/2006/dsa-1223"
          },
          {
            "name": "ADV-2007-0930",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2007/0930"
          },
          {
            "name": "23443",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/23443"
          },
          {
            "name": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=216937",
            "refsource": "MISC",
            "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=216937"
          },
          {
            "name": "MDKSA-2006:219",
            "refsource": "MANDRIVA",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:219"
          },
          {
            "name": "OpenPKG-SA-2006.038",
            "refsource": "OPENPKG",
            "url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.038.html"
          },
          {
            "name": "ADV-2006-4717",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2006/4717"
          },
          {
            "name": "23514",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/23514"
          },
          {
            "name": "SSA:2006-335-01",
            "refsource": "SLACKWARE",
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.469379"
          },
          {
            "name": "24479",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/24479"
          },
          {
            "name": "23163",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/23163"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:gnu:tar:1.16:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:gnu:tar:1.15.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-6097"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite arbitrary files via a tar file that contains a GNUTYPE_NAMES record with a symbolic link, which is not properly handled by the extract_archive function in extract.c and extract_mangle function in mangle.c, a variant of CVE-2002-1216."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-Other"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20061121 GNU tar directory traversal",
              "refsource": "FULLDISC",
              "tags": [
                "Exploit"
              ],
              "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050812.html"
            },
            {
              "name": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=216937",
              "refsource": "MISC",
              "tags": [
                "Exploit"
              ],
              "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=216937"
            },
            {
              "name": "21235",
              "refsource": "BID",
              "tags": [
                "Exploit"
              ],
              "url": "http://www.securityfocus.com/bid/21235"
            },
            {
              "name": "USN-385-1",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "http://www.ubuntu.com/usn/usn-385-1"
            },
            {
              "name": "23115",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/23115"
            },
            {
              "name": "23142",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/23142"
            },
            {
              "name": "23117",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/23117"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-821",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "https://issues.rpath.com/browse/RPL-821"
            },
            {
              "name": "DSA-1223",
              "refsource": "DEBIAN",
              "tags": [],
              "url": "http://www.debian.org/security/2006/dsa-1223"
            },
            {
              "name": "SSA:2006-335-01",
              "refsource": "SLACKWARE",
              "tags": [],
              "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.469379"
            },
            {
              "name": "2006-0068",
              "refsource": "TRUSTIX",
              "tags": [],
              "url": "http://www.trustix.org/errata/2006/0068/"
            },
            {
              "name": "23173",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/23173"
            },
            {
              "name": "23163",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/23163"
            },
            {
              "name": "23209",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/23209"
            },
            {
              "name": "23146",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/23146"
            },
            {
              "name": "23198",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/23198"
            },
            {
              "name": "OpenPKG-SA-2006.038",
              "refsource": "OPENPKG",
              "tags": [],
              "url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.038.html"
            },
            {
              "name": "GLSA-200612-10",
              "refsource": "GENTOO",
              "tags": [],
              "url": "http://security.gentoo.org/glsa/glsa-200612-10.xml"
            },
            {
              "name": "23314",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/23314"
            },
            {
              "name": "RHSA-2006:0749",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://rhn.redhat.com/errata/RHSA-2006-0749.html"
            },
            {
              "name": "1017423",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://securitytracker.com/id?1017423"
            },
            {
              "name": "23443",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/23443"
            },
            {
              "name": "http://kb.vmware.com/KanisaPlatform/Publishing/817/2240267_f.SAL_Public.html",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://kb.vmware.com/KanisaPlatform/Publishing/817/2240267_f.SAL_Public.html"
            },
            {
              "name": "20061202-01-P",
              "refsource": "SGI",
              "tags": [],
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20061202-01-P.asc"
            },
            {
              "name": "23514",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/23514"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-015.htm",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-015.htm"
            },
            {
              "name": "http://docs.info.apple.com/article.html?artnum=305214",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://docs.info.apple.com/article.html?artnum=305214"
            },
            {
              "name": "23911",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/23911"
            },
            {
              "name": "24479",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/24479"
            },
            {
              "name": "http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html"
            },
            {
              "name": "24636",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/24636"
            },
            {
              "name": "APPLE-SA-2007-03-13",
              "refsource": "APPLE",
              "tags": [],
              "url": "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html"
            },
            {
              "name": "MDKSA-2006:219",
              "refsource": "MANDRIVA",
              "tags": [],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:219"
            },
            {
              "name": "TA07-072A",
              "refsource": "CERT",
              "tags": [
                "US Government Resource"
              ],
              "url": "http://www.us-cert.gov/cas/techalerts/TA07-072A.html"
            },
            {
              "name": "1918",
              "refsource": "SREASON",
              "tags": [],
              "url": "http://securityreason.com/securityalert/1918"
            },
            {
              "name": "ADV-2006-4717",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2006/4717"
            },
            {
              "name": "ADV-2007-0930",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2007/0930"
            },
            {
              "name": "ADV-2007-1171",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2007/1171"
            },
            {
              "name": "FreeBSD-SA-06:26",
              "refsource": "FREEBSD",
              "tags": [],
              "url": "http://security.freebsd.org/advisories/FreeBSD-SA-06:26.gtar.asc"
            },
            {
              "name": "ADV-2006-5102",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2006/5102"
            },
            {
              "name": "oval:org.mitre.oval:def:10963",
              "refsource": "OVAL",
              "tags": [],
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10963"
            },
            {
              "name": "20070330 VMSA-2007-0002 VMware ESX security updates",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/464268/100/0/threaded"
            },
            {
              "name": "20061201 rPSA-2006-0222-1 tar",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/453286/100/0/threaded"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.0,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 4.9,
          "impactScore": 4.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": true
        }
      },
      "lastModifiedDate": "2018-10-17T21:46Z",
      "publishedDate": "2006-11-24T18:07Z"
    }
  }
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "tar-1.34-2.2 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the tar-1.34-2.2 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-11422",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_11422-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2001-1267 page",
        "url": "https://www.suse.com/security/cve/CVE-2001-1267/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2002-0399 page",
        "url": "https://www.suse.com/security/cve/CVE-2002-0399/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2005-1918 page",
        "url": "https://www.suse.com/security/cve/CVE-2005-1918/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2006-0300 page",
        "url": "https://www.suse.com/security/cve/CVE-2006-0300/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2006-6097 page",
        "url": "https://www.suse.com/security/cve/CVE-2006-6097/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-20482 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-20482/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9923 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9923/"
      }
    ],
    "title": "tar-1.34-2.2 on GA media",
    "tracking": {
      "current_release_date": "2024-06-15T00:00:00Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:11422-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tar-1.34-2.2.aarch64",
                "product": {
                  "name": "tar-1.34-2.2.aarch64",
                  "product_id": "tar-1.34-2.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "tar-backup-scripts-1.34-2.2.aarch64",
                "product": {
                  "name": "tar-backup-scripts-1.34-2.2.aarch64",
                  "product_id": "tar-backup-scripts-1.34-2.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "tar-doc-1.34-2.2.aarch64",
                "product": {
                  "name": "tar-doc-1.34-2.2.aarch64",
                  "product_id": "tar-doc-1.34-2.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "tar-lang-1.34-2.2.aarch64",
                "product": {
                  "name": "tar-lang-1.34-2.2.aarch64",
                  "product_id": "tar-lang-1.34-2.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "tar-rmt-1.34-2.2.aarch64",
                "product": {
                  "name": "tar-rmt-1.34-2.2.aarch64",
                  "product_id": "tar-rmt-1.34-2.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "tar-tests-1.34-2.2.aarch64",
                "product": {
                  "name": "tar-tests-1.34-2.2.aarch64",
                  "product_id": "tar-tests-1.34-2.2.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tar-1.34-2.2.ppc64le",
                "product": {
                  "name": "tar-1.34-2.2.ppc64le",
                  "product_id": "tar-1.34-2.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "tar-backup-scripts-1.34-2.2.ppc64le",
                "product": {
                  "name": "tar-backup-scripts-1.34-2.2.ppc64le",
                  "product_id": "tar-backup-scripts-1.34-2.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "tar-doc-1.34-2.2.ppc64le",
                "product": {
                  "name": "tar-doc-1.34-2.2.ppc64le",
                  "product_id": "tar-doc-1.34-2.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "tar-lang-1.34-2.2.ppc64le",
                "product": {
                  "name": "tar-lang-1.34-2.2.ppc64le",
                  "product_id": "tar-lang-1.34-2.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "tar-rmt-1.34-2.2.ppc64le",
                "product": {
                  "name": "tar-rmt-1.34-2.2.ppc64le",
                  "product_id": "tar-rmt-1.34-2.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "tar-tests-1.34-2.2.ppc64le",
                "product": {
                  "name": "tar-tests-1.34-2.2.ppc64le",
                  "product_id": "tar-tests-1.34-2.2.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tar-1.34-2.2.s390x",
                "product": {
                  "name": "tar-1.34-2.2.s390x",
                  "product_id": "tar-1.34-2.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "tar-backup-scripts-1.34-2.2.s390x",
                "product": {
                  "name": "tar-backup-scripts-1.34-2.2.s390x",
                  "product_id": "tar-backup-scripts-1.34-2.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "tar-doc-1.34-2.2.s390x",
                "product": {
                  "name": "tar-doc-1.34-2.2.s390x",
                  "product_id": "tar-doc-1.34-2.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "tar-lang-1.34-2.2.s390x",
                "product": {
                  "name": "tar-lang-1.34-2.2.s390x",
                  "product_id": "tar-lang-1.34-2.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "tar-rmt-1.34-2.2.s390x",
                "product": {
                  "name": "tar-rmt-1.34-2.2.s390x",
                  "product_id": "tar-rmt-1.34-2.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "tar-tests-1.34-2.2.s390x",
                "product": {
                  "name": "tar-tests-1.34-2.2.s390x",
                  "product_id": "tar-tests-1.34-2.2.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tar-1.34-2.2.x86_64",
                "product": {
                  "name": "tar-1.34-2.2.x86_64",
                  "product_id": "tar-1.34-2.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "tar-backup-scripts-1.34-2.2.x86_64",
                "product": {
                  "name": "tar-backup-scripts-1.34-2.2.x86_64",
                  "product_id": "tar-backup-scripts-1.34-2.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "tar-doc-1.34-2.2.x86_64",
                "product": {
                  "name": "tar-doc-1.34-2.2.x86_64",
                  "product_id": "tar-doc-1.34-2.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "tar-lang-1.34-2.2.x86_64",
                "product": {
                  "name": "tar-lang-1.34-2.2.x86_64",
                  "product_id": "tar-lang-1.34-2.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "tar-rmt-1.34-2.2.x86_64",
                "product": {
                  "name": "tar-rmt-1.34-2.2.x86_64",
                  "product_id": "tar-rmt-1.34-2.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "tar-tests-1.34-2.2.x86_64",
                "product": {
                  "name": "tar-tests-1.34-2.2.x86_64",
                  "product_id": "tar-tests-1.34-2.2.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-1.34-2.2.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tar-1.34-2.2.aarch64"
        },
        "product_reference": "tar-1.34-2.2.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-1.34-2.2.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tar-1.34-2.2.ppc64le"
        },
        "product_reference": "tar-1.34-2.2.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-1.34-2.2.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tar-1.34-2.2.s390x"
        },
        "product_reference": "tar-1.34-2.2.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-1.34-2.2.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tar-1.34-2.2.x86_64"
        },
        "product_reference": "tar-1.34-2.2.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-backup-scripts-1.34-2.2.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64"
        },
        "product_reference": "tar-backup-scripts-1.34-2.2.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-backup-scripts-1.34-2.2.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le"
        },
        "product_reference": "tar-backup-scripts-1.34-2.2.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-backup-scripts-1.34-2.2.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x"
        },
        "product_reference": "tar-backup-scripts-1.34-2.2.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-backup-scripts-1.34-2.2.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64"
        },
        "product_reference": "tar-backup-scripts-1.34-2.2.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-doc-1.34-2.2.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64"
        },
        "product_reference": "tar-doc-1.34-2.2.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-doc-1.34-2.2.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le"
        },
        "product_reference": "tar-doc-1.34-2.2.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-doc-1.34-2.2.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x"
        },
        "product_reference": "tar-doc-1.34-2.2.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-doc-1.34-2.2.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64"
        },
        "product_reference": "tar-doc-1.34-2.2.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-lang-1.34-2.2.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64"
        },
        "product_reference": "tar-lang-1.34-2.2.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-lang-1.34-2.2.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le"
        },
        "product_reference": "tar-lang-1.34-2.2.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-lang-1.34-2.2.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x"
        },
        "product_reference": "tar-lang-1.34-2.2.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-lang-1.34-2.2.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64"
        },
        "product_reference": "tar-lang-1.34-2.2.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-rmt-1.34-2.2.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64"
        },
        "product_reference": "tar-rmt-1.34-2.2.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-rmt-1.34-2.2.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le"
        },
        "product_reference": "tar-rmt-1.34-2.2.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-rmt-1.34-2.2.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x"
        },
        "product_reference": "tar-rmt-1.34-2.2.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-rmt-1.34-2.2.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64"
        },
        "product_reference": "tar-rmt-1.34-2.2.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-tests-1.34-2.2.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64"
        },
        "product_reference": "tar-tests-1.34-2.2.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-tests-1.34-2.2.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le"
        },
        "product_reference": "tar-tests-1.34-2.2.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-tests-1.34-2.2.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x"
        },
        "product_reference": "tar-tests-1.34-2.2.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-tests-1.34-2.2.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64"
        },
        "product_reference": "tar-tests-1.34-2.2.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2001-1267",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2001-1267"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Directory traversal vulnerability in GNU tar 1.13.19 and earlier allows local users to overwrite arbitrary files during archive extraction via a tar file whose filenames contain a .. (dot dot).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:tar-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-1.34-2.2.x86_64",
          "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64",
          "openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64",
          "openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64",
          "openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64",
          "openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2001-1267",
          "url": "https://www.suse.com/security/cve/CVE-2001-1267"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1203750 for CVE-2001-1267",
          "url": "https://bugzilla.suse.com/1203750"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 299738 for CVE-2001-1267",
          "url": "https://bugzilla.suse.com/299738"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 299745 for CVE-2001-1267",
          "url": "https://bugzilla.suse.com/299745"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 299747 for CVE-2001-1267",
          "url": "https://bugzilla.suse.com/299747"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:tar-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2001-1267"
    },
    {
      "cve": "CVE-2002-0399",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2002-0399"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Directory traversal vulnerability in GNU tar 1.13.19 through 1.13.25, and possibly later versions, allows attackers to overwrite arbitrary files during archive extraction via a (1) \"/..\" or (2) \"./..\" string, which removes the leading slash but leaves the \"..\", a variant of CVE-2001-1267.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:tar-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-1.34-2.2.x86_64",
          "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64",
          "openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64",
          "openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64",
          "openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64",
          "openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2002-0399",
          "url": "https://www.suse.com/security/cve/CVE-2002-0399"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 145081 for CVE-2002-0399",
          "url": "https://bugzilla.suse.com/145081"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 299738 for CVE-2002-0399",
          "url": "https://bugzilla.suse.com/299738"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 299745 for CVE-2002-0399",
          "url": "https://bugzilla.suse.com/299745"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 299747 for CVE-2002-0399",
          "url": "https://bugzilla.suse.com/299747"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:tar-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2002-0399"
    },
    {
      "cve": "CVE-2005-1918",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2005-1918"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an \"incorrect optimization\" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving \"/../\" sequences with a leading \"/\".",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:tar-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-1.34-2.2.x86_64",
          "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64",
          "openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64",
          "openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64",
          "openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64",
          "openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2005-1918",
          "url": "https://www.suse.com/security/cve/CVE-2005-1918"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 145081 for CVE-2005-1918",
          "url": "https://bugzilla.suse.com/145081"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:tar-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2005-1918"
    },
    {
      "cve": "CVE-2006-0300",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2006-0300"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:tar-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-1.34-2.2.x86_64",
          "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64",
          "openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64",
          "openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64",
          "openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64",
          "openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2006-0300",
          "url": "https://www.suse.com/security/cve/CVE-2006-0300"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 151516 for CVE-2006-0300",
          "url": "https://bugzilla.suse.com/151516"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:tar-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2006-0300"
    },
    {
      "cve": "CVE-2006-6097",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2006-6097"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite arbitrary files via a tar file that contains a GNUTYPE_NAMES record with a symbolic link, which is not properly handled by the extract_archive function in extract.c and extract_mangle function in mangle.c, a variant of CVE-2002-1216.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:tar-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-1.34-2.2.x86_64",
          "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64",
          "openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64",
          "openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64",
          "openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64",
          "openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2006-6097",
          "url": "https://www.suse.com/security/cve/CVE-2006-6097"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 223185 for CVE-2006-6097",
          "url": "https://bugzilla.suse.com/223185"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:tar-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2006-6097"
    },
    {
      "cve": "CVE-2018-20482",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-20482"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service (infinite read loop in sparse_dump_region in sparse.c) by modifying a file that is supposed to be archived by a different user\u0027s process (e.g., a system backup running as root).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:tar-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-1.34-2.2.x86_64",
          "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64",
          "openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64",
          "openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64",
          "openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64",
          "openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-20482",
          "url": "https://www.suse.com/security/cve/CVE-2018-20482"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1120610 for CVE-2018-20482",
          "url": "https://bugzilla.suse.com/1120610"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:tar-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:tar-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2018-20482"
    },
    {
      "cve": "CVE-2019-9923",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9923"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that have malformed extended headers.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:tar-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-1.34-2.2.x86_64",
          "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64",
          "openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64",
          "openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64",
          "openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64",
          "openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64",
          "openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le",
          "openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x",
          "openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9923",
          "url": "https://www.suse.com/security/cve/CVE-2019-9923"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1130496 for CVE-2019-9923",
          "url": "https://bugzilla.suse.com/1130496"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:tar-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:tar-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64",
            "openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64",
            "openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le",
            "openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x",
            "openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-9923"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated tar packages that fix a path traversal flaw are now available.\n\nThis update has been rated as having moderate security impact by the Red Hat\nSecurity Response Team.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The GNU tar program saves many files together in one archive and can\nrestore individual files (or all of the files) from that archive. \n\nTeemu Salmela discovered a path traversal flaw in the way GNU tar extracted\narchives. A malicious user could create a tar archive that could write to\narbitrary files to which the user running GNU tar has write access.\n(CVE-2006-6097)\n\nUsers of tar should upgrade to this updated package, which contains a\nreplacement backported patch to correct this issue.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2006:0749",
        "url": "https://access.redhat.com/errata/RHSA-2006:0749"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "216937",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=216937"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0749.json"
      }
    ],
    "title": "Red Hat Security Advisory: tar security update",
    "tracking": {
      "current_release_date": "2025-11-21T17:30:59+00:00",
      "generator": {
        "date": "2025-11-21T17:30:59+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.12"
        }
      },
      "id": "RHSA-2006:0749",
      "initial_release_date": "2006-12-19T22:47:00+00:00",
      "revision_history": [
        {
          "date": "2006-12-19T22:47:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2006-12-19T17:47:44+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-11-21T17:30:59+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
                "product": {
                  "name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
                  "product_id": "2.1AS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::as"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Linux Advanced Workstation 2.1",
                "product": {
                  "name": "Red Hat Linux Advanced Workstation 2.1",
                  "product_id": "2.1AW",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::aw"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES version 2.1",
                "product": {
                  "name": "Red Hat Enterprise Linux ES version 2.1",
                  "product_id": "2.1ES",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::es"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux WS version 2.1",
                "product": {
                  "name": "Red Hat Enterprise Linux WS version 2.1",
                  "product_id": "2.1WS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::ws"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux AS version 4",
                  "product_id": "4AS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::as"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop version 4",
                  "product_id": "4Desktop",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::desktop"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux ES version 4",
                  "product_id": "4ES",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::es"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux WS version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux WS version 4",
                  "product_id": "4WS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::ws"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS version 3",
                "product": {
                  "name": "Red Hat Enterprise Linux AS version 3",
                  "product_id": "3AS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:3::as"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Desktop version 3",
                "product": {
                  "name": "Red Hat Desktop version 3",
                  "product_id": "3Desktop",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:3::desktop"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES version 3",
                "product": {
                  "name": "Red Hat Enterprise Linux ES version 3",
                  "product_id": "3ES",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:3::es"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux WS version 3",
                "product": {
                  "name": "Red Hat Enterprise Linux WS version 3",
                  "product_id": "3WS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:3::ws"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tar-0:1.13.25-6.AS21.1.ia64",
                "product": {
                  "name": "tar-0:1.13.25-6.AS21.1.ia64",
                  "product_id": "tar-0:1.13.25-6.AS21.1.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tar@1.13.25-6.AS21.1?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tar-debuginfo-0:1.14-12.RHEL4.ia64",
                "product": {
                  "name": "tar-debuginfo-0:1.14-12.RHEL4.ia64",
                  "product_id": "tar-debuginfo-0:1.14-12.RHEL4.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tar-debuginfo@1.14-12.RHEL4?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tar-0:1.14-12.RHEL4.ia64",
                "product": {
                  "name": "tar-0:1.14-12.RHEL4.ia64",
                  "product_id": "tar-0:1.14-12.RHEL4.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tar@1.14-12.RHEL4?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tar-debuginfo-0:1.13.25-15.RHEL3.ia64",
                "product": {
                  "name": "tar-debuginfo-0:1.13.25-15.RHEL3.ia64",
                  "product_id": "tar-debuginfo-0:1.13.25-15.RHEL3.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tar-debuginfo@1.13.25-15.RHEL3?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tar-0:1.13.25-15.RHEL3.ia64",
                "product": {
                  "name": "tar-0:1.13.25-15.RHEL3.ia64",
                  "product_id": "tar-0:1.13.25-15.RHEL3.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tar@1.13.25-15.RHEL3?arch=ia64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tar-0:1.13.25-6.AS21.1.src",
                "product": {
                  "name": "tar-0:1.13.25-6.AS21.1.src",
                  "product_id": "tar-0:1.13.25-6.AS21.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tar@1.13.25-6.AS21.1?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tar-0:1.14-12.RHEL4.src",
                "product": {
                  "name": "tar-0:1.14-12.RHEL4.src",
                  "product_id": "tar-0:1.14-12.RHEL4.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tar@1.14-12.RHEL4?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tar-0:1.13.25-15.RHEL3.src",
                "product": {
                  "name": "tar-0:1.13.25-15.RHEL3.src",
                  "product_id": "tar-0:1.13.25-15.RHEL3.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tar@1.13.25-15.RHEL3?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tar-0:1.13.25-6.AS21.1.i386",
                "product": {
                  "name": "tar-0:1.13.25-6.AS21.1.i386",
                  "product_id": "tar-0:1.13.25-6.AS21.1.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tar@1.13.25-6.AS21.1?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tar-debuginfo-0:1.14-12.RHEL4.i386",
                "product": {
                  "name": "tar-debuginfo-0:1.14-12.RHEL4.i386",
                  "product_id": "tar-debuginfo-0:1.14-12.RHEL4.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tar-debuginfo@1.14-12.RHEL4?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tar-0:1.14-12.RHEL4.i386",
                "product": {
                  "name": "tar-0:1.14-12.RHEL4.i386",
                  "product_id": "tar-0:1.14-12.RHEL4.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tar@1.14-12.RHEL4?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tar-debuginfo-0:1.13.25-15.RHEL3.i386",
                "product": {
                  "name": "tar-debuginfo-0:1.13.25-15.RHEL3.i386",
                  "product_id": "tar-debuginfo-0:1.13.25-15.RHEL3.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tar-debuginfo@1.13.25-15.RHEL3?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tar-0:1.13.25-15.RHEL3.i386",
                "product": {
                  "name": "tar-0:1.13.25-15.RHEL3.i386",
                  "product_id": "tar-0:1.13.25-15.RHEL3.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tar@1.13.25-15.RHEL3?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tar-debuginfo-0:1.14-12.RHEL4.x86_64",
                "product": {
                  "name": "tar-debuginfo-0:1.14-12.RHEL4.x86_64",
                  "product_id": "tar-debuginfo-0:1.14-12.RHEL4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tar-debuginfo@1.14-12.RHEL4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tar-0:1.14-12.RHEL4.x86_64",
                "product": {
                  "name": "tar-0:1.14-12.RHEL4.x86_64",
                  "product_id": "tar-0:1.14-12.RHEL4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tar@1.14-12.RHEL4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tar-debuginfo-0:1.13.25-15.RHEL3.x86_64",
                "product": {
                  "name": "tar-debuginfo-0:1.13.25-15.RHEL3.x86_64",
                  "product_id": "tar-debuginfo-0:1.13.25-15.RHEL3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tar-debuginfo@1.13.25-15.RHEL3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tar-0:1.13.25-15.RHEL3.x86_64",
                "product": {
                  "name": "tar-0:1.13.25-15.RHEL3.x86_64",
                  "product_id": "tar-0:1.13.25-15.RHEL3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tar@1.13.25-15.RHEL3?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tar-debuginfo-0:1.14-12.RHEL4.ppc",
                "product": {
                  "name": "tar-debuginfo-0:1.14-12.RHEL4.ppc",
                  "product_id": "tar-debuginfo-0:1.14-12.RHEL4.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tar-debuginfo@1.14-12.RHEL4?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tar-0:1.14-12.RHEL4.ppc",
                "product": {
                  "name": "tar-0:1.14-12.RHEL4.ppc",
                  "product_id": "tar-0:1.14-12.RHEL4.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tar@1.14-12.RHEL4?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tar-debuginfo-0:1.13.25-15.RHEL3.ppc",
                "product": {
                  "name": "tar-debuginfo-0:1.13.25-15.RHEL3.ppc",
                  "product_id": "tar-debuginfo-0:1.13.25-15.RHEL3.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tar-debuginfo@1.13.25-15.RHEL3?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tar-0:1.13.25-15.RHEL3.ppc",
                "product": {
                  "name": "tar-0:1.13.25-15.RHEL3.ppc",
                  "product_id": "tar-0:1.13.25-15.RHEL3.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tar@1.13.25-15.RHEL3?arch=ppc"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tar-debuginfo-0:1.14-12.RHEL4.s390x",
                "product": {
                  "name": "tar-debuginfo-0:1.14-12.RHEL4.s390x",
                  "product_id": "tar-debuginfo-0:1.14-12.RHEL4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tar-debuginfo@1.14-12.RHEL4?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tar-0:1.14-12.RHEL4.s390x",
                "product": {
                  "name": "tar-0:1.14-12.RHEL4.s390x",
                  "product_id": "tar-0:1.14-12.RHEL4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tar@1.14-12.RHEL4?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tar-debuginfo-0:1.13.25-15.RHEL3.s390x",
                "product": {
                  "name": "tar-debuginfo-0:1.13.25-15.RHEL3.s390x",
                  "product_id": "tar-debuginfo-0:1.13.25-15.RHEL3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tar-debuginfo@1.13.25-15.RHEL3?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tar-0:1.13.25-15.RHEL3.s390x",
                "product": {
                  "name": "tar-0:1.13.25-15.RHEL3.s390x",
                  "product_id": "tar-0:1.13.25-15.RHEL3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tar@1.13.25-15.RHEL3?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tar-debuginfo-0:1.14-12.RHEL4.s390",
                "product": {
                  "name": "tar-debuginfo-0:1.14-12.RHEL4.s390",
                  "product_id": "tar-debuginfo-0:1.14-12.RHEL4.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tar-debuginfo@1.14-12.RHEL4?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tar-0:1.14-12.RHEL4.s390",
                "product": {
                  "name": "tar-0:1.14-12.RHEL4.s390",
                  "product_id": "tar-0:1.14-12.RHEL4.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tar@1.14-12.RHEL4?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tar-debuginfo-0:1.13.25-15.RHEL3.s390",
                "product": {
                  "name": "tar-debuginfo-0:1.13.25-15.RHEL3.s390",
                  "product_id": "tar-debuginfo-0:1.13.25-15.RHEL3.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tar-debuginfo@1.13.25-15.RHEL3?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tar-0:1.13.25-15.RHEL3.s390",
                "product": {
                  "name": "tar-0:1.13.25-15.RHEL3.s390",
                  "product_id": "tar-0:1.13.25-15.RHEL3.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tar@1.13.25-15.RHEL3?arch=s390"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-6.AS21.1.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:tar-0:1.13.25-6.AS21.1.i386"
        },
        "product_reference": "tar-0:1.13.25-6.AS21.1.i386",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-6.AS21.1.ia64 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:tar-0:1.13.25-6.AS21.1.ia64"
        },
        "product_reference": "tar-0:1.13.25-6.AS21.1.ia64",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-6.AS21.1.src as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:tar-0:1.13.25-6.AS21.1.src"
        },
        "product_reference": "tar-0:1.13.25-6.AS21.1.src",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-6.AS21.1.i386 as a component of Red Hat Linux Advanced Workstation 2.1",
          "product_id": "2.1AW:tar-0:1.13.25-6.AS21.1.i386"
        },
        "product_reference": "tar-0:1.13.25-6.AS21.1.i386",
        "relates_to_product_reference": "2.1AW"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-6.AS21.1.ia64 as a component of Red Hat Linux Advanced Workstation 2.1",
          "product_id": "2.1AW:tar-0:1.13.25-6.AS21.1.ia64"
        },
        "product_reference": "tar-0:1.13.25-6.AS21.1.ia64",
        "relates_to_product_reference": "2.1AW"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-6.AS21.1.src as a component of Red Hat Linux Advanced Workstation 2.1",
          "product_id": "2.1AW:tar-0:1.13.25-6.AS21.1.src"
        },
        "product_reference": "tar-0:1.13.25-6.AS21.1.src",
        "relates_to_product_reference": "2.1AW"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-6.AS21.1.i386 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:tar-0:1.13.25-6.AS21.1.i386"
        },
        "product_reference": "tar-0:1.13.25-6.AS21.1.i386",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-6.AS21.1.ia64 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:tar-0:1.13.25-6.AS21.1.ia64"
        },
        "product_reference": "tar-0:1.13.25-6.AS21.1.ia64",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-6.AS21.1.src as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:tar-0:1.13.25-6.AS21.1.src"
        },
        "product_reference": "tar-0:1.13.25-6.AS21.1.src",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-6.AS21.1.i386 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:tar-0:1.13.25-6.AS21.1.i386"
        },
        "product_reference": "tar-0:1.13.25-6.AS21.1.i386",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-6.AS21.1.ia64 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:tar-0:1.13.25-6.AS21.1.ia64"
        },
        "product_reference": "tar-0:1.13.25-6.AS21.1.ia64",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-6.AS21.1.src as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:tar-0:1.13.25-6.AS21.1.src"
        },
        "product_reference": "tar-0:1.13.25-6.AS21.1.src",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-15.RHEL3.i386 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:tar-0:1.13.25-15.RHEL3.i386"
        },
        "product_reference": "tar-0:1.13.25-15.RHEL3.i386",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-15.RHEL3.ia64 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:tar-0:1.13.25-15.RHEL3.ia64"
        },
        "product_reference": "tar-0:1.13.25-15.RHEL3.ia64",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-15.RHEL3.ppc as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:tar-0:1.13.25-15.RHEL3.ppc"
        },
        "product_reference": "tar-0:1.13.25-15.RHEL3.ppc",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-15.RHEL3.s390 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:tar-0:1.13.25-15.RHEL3.s390"
        },
        "product_reference": "tar-0:1.13.25-15.RHEL3.s390",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-15.RHEL3.s390x as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:tar-0:1.13.25-15.RHEL3.s390x"
        },
        "product_reference": "tar-0:1.13.25-15.RHEL3.s390x",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-15.RHEL3.src as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:tar-0:1.13.25-15.RHEL3.src"
        },
        "product_reference": "tar-0:1.13.25-15.RHEL3.src",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-15.RHEL3.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:tar-0:1.13.25-15.RHEL3.x86_64"
        },
        "product_reference": "tar-0:1.13.25-15.RHEL3.x86_64",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.13.25-15.RHEL3.i386 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:tar-debuginfo-0:1.13.25-15.RHEL3.i386"
        },
        "product_reference": "tar-debuginfo-0:1.13.25-15.RHEL3.i386",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.13.25-15.RHEL3.ia64 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:tar-debuginfo-0:1.13.25-15.RHEL3.ia64"
        },
        "product_reference": "tar-debuginfo-0:1.13.25-15.RHEL3.ia64",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.13.25-15.RHEL3.ppc as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:tar-debuginfo-0:1.13.25-15.RHEL3.ppc"
        },
        "product_reference": "tar-debuginfo-0:1.13.25-15.RHEL3.ppc",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.13.25-15.RHEL3.s390 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:tar-debuginfo-0:1.13.25-15.RHEL3.s390"
        },
        "product_reference": "tar-debuginfo-0:1.13.25-15.RHEL3.s390",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.13.25-15.RHEL3.s390x as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:tar-debuginfo-0:1.13.25-15.RHEL3.s390x"
        },
        "product_reference": "tar-debuginfo-0:1.13.25-15.RHEL3.s390x",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.13.25-15.RHEL3.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:tar-debuginfo-0:1.13.25-15.RHEL3.x86_64"
        },
        "product_reference": "tar-debuginfo-0:1.13.25-15.RHEL3.x86_64",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-15.RHEL3.i386 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:tar-0:1.13.25-15.RHEL3.i386"
        },
        "product_reference": "tar-0:1.13.25-15.RHEL3.i386",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-15.RHEL3.ia64 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:tar-0:1.13.25-15.RHEL3.ia64"
        },
        "product_reference": "tar-0:1.13.25-15.RHEL3.ia64",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-15.RHEL3.ppc as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:tar-0:1.13.25-15.RHEL3.ppc"
        },
        "product_reference": "tar-0:1.13.25-15.RHEL3.ppc",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-15.RHEL3.s390 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:tar-0:1.13.25-15.RHEL3.s390"
        },
        "product_reference": "tar-0:1.13.25-15.RHEL3.s390",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-15.RHEL3.s390x as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:tar-0:1.13.25-15.RHEL3.s390x"
        },
        "product_reference": "tar-0:1.13.25-15.RHEL3.s390x",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-15.RHEL3.src as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:tar-0:1.13.25-15.RHEL3.src"
        },
        "product_reference": "tar-0:1.13.25-15.RHEL3.src",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-15.RHEL3.x86_64 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:tar-0:1.13.25-15.RHEL3.x86_64"
        },
        "product_reference": "tar-0:1.13.25-15.RHEL3.x86_64",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.13.25-15.RHEL3.i386 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:tar-debuginfo-0:1.13.25-15.RHEL3.i386"
        },
        "product_reference": "tar-debuginfo-0:1.13.25-15.RHEL3.i386",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.13.25-15.RHEL3.ia64 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:tar-debuginfo-0:1.13.25-15.RHEL3.ia64"
        },
        "product_reference": "tar-debuginfo-0:1.13.25-15.RHEL3.ia64",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.13.25-15.RHEL3.ppc as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:tar-debuginfo-0:1.13.25-15.RHEL3.ppc"
        },
        "product_reference": "tar-debuginfo-0:1.13.25-15.RHEL3.ppc",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.13.25-15.RHEL3.s390 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:tar-debuginfo-0:1.13.25-15.RHEL3.s390"
        },
        "product_reference": "tar-debuginfo-0:1.13.25-15.RHEL3.s390",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.13.25-15.RHEL3.s390x as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:tar-debuginfo-0:1.13.25-15.RHEL3.s390x"
        },
        "product_reference": "tar-debuginfo-0:1.13.25-15.RHEL3.s390x",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.13.25-15.RHEL3.x86_64 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:tar-debuginfo-0:1.13.25-15.RHEL3.x86_64"
        },
        "product_reference": "tar-debuginfo-0:1.13.25-15.RHEL3.x86_64",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-15.RHEL3.i386 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:tar-0:1.13.25-15.RHEL3.i386"
        },
        "product_reference": "tar-0:1.13.25-15.RHEL3.i386",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-15.RHEL3.ia64 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:tar-0:1.13.25-15.RHEL3.ia64"
        },
        "product_reference": "tar-0:1.13.25-15.RHEL3.ia64",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-15.RHEL3.ppc as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:tar-0:1.13.25-15.RHEL3.ppc"
        },
        "product_reference": "tar-0:1.13.25-15.RHEL3.ppc",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-15.RHEL3.s390 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:tar-0:1.13.25-15.RHEL3.s390"
        },
        "product_reference": "tar-0:1.13.25-15.RHEL3.s390",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-15.RHEL3.s390x as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:tar-0:1.13.25-15.RHEL3.s390x"
        },
        "product_reference": "tar-0:1.13.25-15.RHEL3.s390x",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-15.RHEL3.src as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:tar-0:1.13.25-15.RHEL3.src"
        },
        "product_reference": "tar-0:1.13.25-15.RHEL3.src",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-15.RHEL3.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:tar-0:1.13.25-15.RHEL3.x86_64"
        },
        "product_reference": "tar-0:1.13.25-15.RHEL3.x86_64",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.13.25-15.RHEL3.i386 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:tar-debuginfo-0:1.13.25-15.RHEL3.i386"
        },
        "product_reference": "tar-debuginfo-0:1.13.25-15.RHEL3.i386",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.13.25-15.RHEL3.ia64 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:tar-debuginfo-0:1.13.25-15.RHEL3.ia64"
        },
        "product_reference": "tar-debuginfo-0:1.13.25-15.RHEL3.ia64",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.13.25-15.RHEL3.ppc as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:tar-debuginfo-0:1.13.25-15.RHEL3.ppc"
        },
        "product_reference": "tar-debuginfo-0:1.13.25-15.RHEL3.ppc",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.13.25-15.RHEL3.s390 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:tar-debuginfo-0:1.13.25-15.RHEL3.s390"
        },
        "product_reference": "tar-debuginfo-0:1.13.25-15.RHEL3.s390",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.13.25-15.RHEL3.s390x as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:tar-debuginfo-0:1.13.25-15.RHEL3.s390x"
        },
        "product_reference": "tar-debuginfo-0:1.13.25-15.RHEL3.s390x",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.13.25-15.RHEL3.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:tar-debuginfo-0:1.13.25-15.RHEL3.x86_64"
        },
        "product_reference": "tar-debuginfo-0:1.13.25-15.RHEL3.x86_64",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-15.RHEL3.i386 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:tar-0:1.13.25-15.RHEL3.i386"
        },
        "product_reference": "tar-0:1.13.25-15.RHEL3.i386",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-15.RHEL3.ia64 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:tar-0:1.13.25-15.RHEL3.ia64"
        },
        "product_reference": "tar-0:1.13.25-15.RHEL3.ia64",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-15.RHEL3.ppc as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:tar-0:1.13.25-15.RHEL3.ppc"
        },
        "product_reference": "tar-0:1.13.25-15.RHEL3.ppc",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-15.RHEL3.s390 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:tar-0:1.13.25-15.RHEL3.s390"
        },
        "product_reference": "tar-0:1.13.25-15.RHEL3.s390",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-15.RHEL3.s390x as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:tar-0:1.13.25-15.RHEL3.s390x"
        },
        "product_reference": "tar-0:1.13.25-15.RHEL3.s390x",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-15.RHEL3.src as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:tar-0:1.13.25-15.RHEL3.src"
        },
        "product_reference": "tar-0:1.13.25-15.RHEL3.src",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.13.25-15.RHEL3.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:tar-0:1.13.25-15.RHEL3.x86_64"
        },
        "product_reference": "tar-0:1.13.25-15.RHEL3.x86_64",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.13.25-15.RHEL3.i386 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:tar-debuginfo-0:1.13.25-15.RHEL3.i386"
        },
        "product_reference": "tar-debuginfo-0:1.13.25-15.RHEL3.i386",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.13.25-15.RHEL3.ia64 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:tar-debuginfo-0:1.13.25-15.RHEL3.ia64"
        },
        "product_reference": "tar-debuginfo-0:1.13.25-15.RHEL3.ia64",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.13.25-15.RHEL3.ppc as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:tar-debuginfo-0:1.13.25-15.RHEL3.ppc"
        },
        "product_reference": "tar-debuginfo-0:1.13.25-15.RHEL3.ppc",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.13.25-15.RHEL3.s390 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:tar-debuginfo-0:1.13.25-15.RHEL3.s390"
        },
        "product_reference": "tar-debuginfo-0:1.13.25-15.RHEL3.s390",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.13.25-15.RHEL3.s390x as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:tar-debuginfo-0:1.13.25-15.RHEL3.s390x"
        },
        "product_reference": "tar-debuginfo-0:1.13.25-15.RHEL3.s390x",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.13.25-15.RHEL3.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:tar-debuginfo-0:1.13.25-15.RHEL3.x86_64"
        },
        "product_reference": "tar-debuginfo-0:1.13.25-15.RHEL3.x86_64",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.14-12.RHEL4.i386 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:tar-0:1.14-12.RHEL4.i386"
        },
        "product_reference": "tar-0:1.14-12.RHEL4.i386",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.14-12.RHEL4.ia64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:tar-0:1.14-12.RHEL4.ia64"
        },
        "product_reference": "tar-0:1.14-12.RHEL4.ia64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.14-12.RHEL4.ppc as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:tar-0:1.14-12.RHEL4.ppc"
        },
        "product_reference": "tar-0:1.14-12.RHEL4.ppc",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.14-12.RHEL4.s390 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:tar-0:1.14-12.RHEL4.s390"
        },
        "product_reference": "tar-0:1.14-12.RHEL4.s390",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.14-12.RHEL4.s390x as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:tar-0:1.14-12.RHEL4.s390x"
        },
        "product_reference": "tar-0:1.14-12.RHEL4.s390x",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.14-12.RHEL4.src as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:tar-0:1.14-12.RHEL4.src"
        },
        "product_reference": "tar-0:1.14-12.RHEL4.src",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.14-12.RHEL4.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:tar-0:1.14-12.RHEL4.x86_64"
        },
        "product_reference": "tar-0:1.14-12.RHEL4.x86_64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.14-12.RHEL4.i386 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:tar-debuginfo-0:1.14-12.RHEL4.i386"
        },
        "product_reference": "tar-debuginfo-0:1.14-12.RHEL4.i386",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.14-12.RHEL4.ia64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:tar-debuginfo-0:1.14-12.RHEL4.ia64"
        },
        "product_reference": "tar-debuginfo-0:1.14-12.RHEL4.ia64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.14-12.RHEL4.ppc as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:tar-debuginfo-0:1.14-12.RHEL4.ppc"
        },
        "product_reference": "tar-debuginfo-0:1.14-12.RHEL4.ppc",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.14-12.RHEL4.s390 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:tar-debuginfo-0:1.14-12.RHEL4.s390"
        },
        "product_reference": "tar-debuginfo-0:1.14-12.RHEL4.s390",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.14-12.RHEL4.s390x as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:tar-debuginfo-0:1.14-12.RHEL4.s390x"
        },
        "product_reference": "tar-debuginfo-0:1.14-12.RHEL4.s390x",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.14-12.RHEL4.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:tar-debuginfo-0:1.14-12.RHEL4.x86_64"
        },
        "product_reference": "tar-debuginfo-0:1.14-12.RHEL4.x86_64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.14-12.RHEL4.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:tar-0:1.14-12.RHEL4.i386"
        },
        "product_reference": "tar-0:1.14-12.RHEL4.i386",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.14-12.RHEL4.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:tar-0:1.14-12.RHEL4.ia64"
        },
        "product_reference": "tar-0:1.14-12.RHEL4.ia64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.14-12.RHEL4.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:tar-0:1.14-12.RHEL4.ppc"
        },
        "product_reference": "tar-0:1.14-12.RHEL4.ppc",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.14-12.RHEL4.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:tar-0:1.14-12.RHEL4.s390"
        },
        "product_reference": "tar-0:1.14-12.RHEL4.s390",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.14-12.RHEL4.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:tar-0:1.14-12.RHEL4.s390x"
        },
        "product_reference": "tar-0:1.14-12.RHEL4.s390x",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.14-12.RHEL4.src as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:tar-0:1.14-12.RHEL4.src"
        },
        "product_reference": "tar-0:1.14-12.RHEL4.src",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.14-12.RHEL4.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:tar-0:1.14-12.RHEL4.x86_64"
        },
        "product_reference": "tar-0:1.14-12.RHEL4.x86_64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.14-12.RHEL4.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:tar-debuginfo-0:1.14-12.RHEL4.i386"
        },
        "product_reference": "tar-debuginfo-0:1.14-12.RHEL4.i386",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.14-12.RHEL4.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:tar-debuginfo-0:1.14-12.RHEL4.ia64"
        },
        "product_reference": "tar-debuginfo-0:1.14-12.RHEL4.ia64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.14-12.RHEL4.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:tar-debuginfo-0:1.14-12.RHEL4.ppc"
        },
        "product_reference": "tar-debuginfo-0:1.14-12.RHEL4.ppc",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.14-12.RHEL4.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:tar-debuginfo-0:1.14-12.RHEL4.s390"
        },
        "product_reference": "tar-debuginfo-0:1.14-12.RHEL4.s390",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.14-12.RHEL4.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:tar-debuginfo-0:1.14-12.RHEL4.s390x"
        },
        "product_reference": "tar-debuginfo-0:1.14-12.RHEL4.s390x",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.14-12.RHEL4.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:tar-debuginfo-0:1.14-12.RHEL4.x86_64"
        },
        "product_reference": "tar-debuginfo-0:1.14-12.RHEL4.x86_64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.14-12.RHEL4.i386 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:tar-0:1.14-12.RHEL4.i386"
        },
        "product_reference": "tar-0:1.14-12.RHEL4.i386",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.14-12.RHEL4.ia64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:tar-0:1.14-12.RHEL4.ia64"
        },
        "product_reference": "tar-0:1.14-12.RHEL4.ia64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.14-12.RHEL4.ppc as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:tar-0:1.14-12.RHEL4.ppc"
        },
        "product_reference": "tar-0:1.14-12.RHEL4.ppc",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.14-12.RHEL4.s390 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:tar-0:1.14-12.RHEL4.s390"
        },
        "product_reference": "tar-0:1.14-12.RHEL4.s390",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.14-12.RHEL4.s390x as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:tar-0:1.14-12.RHEL4.s390x"
        },
        "product_reference": "tar-0:1.14-12.RHEL4.s390x",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.14-12.RHEL4.src as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:tar-0:1.14-12.RHEL4.src"
        },
        "product_reference": "tar-0:1.14-12.RHEL4.src",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.14-12.RHEL4.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:tar-0:1.14-12.RHEL4.x86_64"
        },
        "product_reference": "tar-0:1.14-12.RHEL4.x86_64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.14-12.RHEL4.i386 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:tar-debuginfo-0:1.14-12.RHEL4.i386"
        },
        "product_reference": "tar-debuginfo-0:1.14-12.RHEL4.i386",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.14-12.RHEL4.ia64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:tar-debuginfo-0:1.14-12.RHEL4.ia64"
        },
        "product_reference": "tar-debuginfo-0:1.14-12.RHEL4.ia64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.14-12.RHEL4.ppc as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:tar-debuginfo-0:1.14-12.RHEL4.ppc"
        },
        "product_reference": "tar-debuginfo-0:1.14-12.RHEL4.ppc",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.14-12.RHEL4.s390 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:tar-debuginfo-0:1.14-12.RHEL4.s390"
        },
        "product_reference": "tar-debuginfo-0:1.14-12.RHEL4.s390",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.14-12.RHEL4.s390x as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:tar-debuginfo-0:1.14-12.RHEL4.s390x"
        },
        "product_reference": "tar-debuginfo-0:1.14-12.RHEL4.s390x",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.14-12.RHEL4.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:tar-debuginfo-0:1.14-12.RHEL4.x86_64"
        },
        "product_reference": "tar-debuginfo-0:1.14-12.RHEL4.x86_64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.14-12.RHEL4.i386 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:tar-0:1.14-12.RHEL4.i386"
        },
        "product_reference": "tar-0:1.14-12.RHEL4.i386",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.14-12.RHEL4.ia64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:tar-0:1.14-12.RHEL4.ia64"
        },
        "product_reference": "tar-0:1.14-12.RHEL4.ia64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.14-12.RHEL4.ppc as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:tar-0:1.14-12.RHEL4.ppc"
        },
        "product_reference": "tar-0:1.14-12.RHEL4.ppc",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.14-12.RHEL4.s390 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:tar-0:1.14-12.RHEL4.s390"
        },
        "product_reference": "tar-0:1.14-12.RHEL4.s390",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.14-12.RHEL4.s390x as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:tar-0:1.14-12.RHEL4.s390x"
        },
        "product_reference": "tar-0:1.14-12.RHEL4.s390x",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.14-12.RHEL4.src as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:tar-0:1.14-12.RHEL4.src"
        },
        "product_reference": "tar-0:1.14-12.RHEL4.src",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-0:1.14-12.RHEL4.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:tar-0:1.14-12.RHEL4.x86_64"
        },
        "product_reference": "tar-0:1.14-12.RHEL4.x86_64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.14-12.RHEL4.i386 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:tar-debuginfo-0:1.14-12.RHEL4.i386"
        },
        "product_reference": "tar-debuginfo-0:1.14-12.RHEL4.i386",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.14-12.RHEL4.ia64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:tar-debuginfo-0:1.14-12.RHEL4.ia64"
        },
        "product_reference": "tar-debuginfo-0:1.14-12.RHEL4.ia64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.14-12.RHEL4.ppc as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:tar-debuginfo-0:1.14-12.RHEL4.ppc"
        },
        "product_reference": "tar-debuginfo-0:1.14-12.RHEL4.ppc",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.14-12.RHEL4.s390 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:tar-debuginfo-0:1.14-12.RHEL4.s390"
        },
        "product_reference": "tar-debuginfo-0:1.14-12.RHEL4.s390",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.14-12.RHEL4.s390x as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:tar-debuginfo-0:1.14-12.RHEL4.s390x"
        },
        "product_reference": "tar-debuginfo-0:1.14-12.RHEL4.s390x",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tar-debuginfo-0:1.14-12.RHEL4.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:tar-debuginfo-0:1.14-12.RHEL4.x86_64"
        },
        "product_reference": "tar-debuginfo-0:1.14-12.RHEL4.x86_64",
        "relates_to_product_reference": "4WS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2006-6097",
      "discovery_date": "2006-11-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1618237"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite arbitrary files via a tar file that contains a GNUTYPE_NAMES record with a symbolic link, which is not properly handled by the extract_archive function in extract.c and extract_mangle function in mangle.c, a variant of CVE-2002-1216.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "2.1AS:tar-0:1.13.25-6.AS21.1.i386",
          "2.1AS:tar-0:1.13.25-6.AS21.1.ia64",
          "2.1AS:tar-0:1.13.25-6.AS21.1.src",
          "2.1AW:tar-0:1.13.25-6.AS21.1.i386",
          "2.1AW:tar-0:1.13.25-6.AS21.1.ia64",
          "2.1AW:tar-0:1.13.25-6.AS21.1.src",
          "2.1ES:tar-0:1.13.25-6.AS21.1.i386",
          "2.1ES:tar-0:1.13.25-6.AS21.1.ia64",
          "2.1ES:tar-0:1.13.25-6.AS21.1.src",
          "2.1WS:tar-0:1.13.25-6.AS21.1.i386",
          "2.1WS:tar-0:1.13.25-6.AS21.1.ia64",
          "2.1WS:tar-0:1.13.25-6.AS21.1.src",
          "3AS:tar-0:1.13.25-15.RHEL3.i386",
          "3AS:tar-0:1.13.25-15.RHEL3.ia64",
          "3AS:tar-0:1.13.25-15.RHEL3.ppc",
          "3AS:tar-0:1.13.25-15.RHEL3.s390",
          "3AS:tar-0:1.13.25-15.RHEL3.s390x",
          "3AS:tar-0:1.13.25-15.RHEL3.src",
          "3AS:tar-0:1.13.25-15.RHEL3.x86_64",
          "3AS:tar-debuginfo-0:1.13.25-15.RHEL3.i386",
          "3AS:tar-debuginfo-0:1.13.25-15.RHEL3.ia64",
          "3AS:tar-debuginfo-0:1.13.25-15.RHEL3.ppc",
          "3AS:tar-debuginfo-0:1.13.25-15.RHEL3.s390",
          "3AS:tar-debuginfo-0:1.13.25-15.RHEL3.s390x",
          "3AS:tar-debuginfo-0:1.13.25-15.RHEL3.x86_64",
          "3Desktop:tar-0:1.13.25-15.RHEL3.i386",
          "3Desktop:tar-0:1.13.25-15.RHEL3.ia64",
          "3Desktop:tar-0:1.13.25-15.RHEL3.ppc",
          "3Desktop:tar-0:1.13.25-15.RHEL3.s390",
          "3Desktop:tar-0:1.13.25-15.RHEL3.s390x",
          "3Desktop:tar-0:1.13.25-15.RHEL3.src",
          "3Desktop:tar-0:1.13.25-15.RHEL3.x86_64",
          "3Desktop:tar-debuginfo-0:1.13.25-15.RHEL3.i386",
          "3Desktop:tar-debuginfo-0:1.13.25-15.RHEL3.ia64",
          "3Desktop:tar-debuginfo-0:1.13.25-15.RHEL3.ppc",
          "3Desktop:tar-debuginfo-0:1.13.25-15.RHEL3.s390",
          "3Desktop:tar-debuginfo-0:1.13.25-15.RHEL3.s390x",
          "3Desktop:tar-debuginfo-0:1.13.25-15.RHEL3.x86_64",
          "3ES:tar-0:1.13.25-15.RHEL3.i386",
          "3ES:tar-0:1.13.25-15.RHEL3.ia64",
          "3ES:tar-0:1.13.25-15.RHEL3.ppc",
          "3ES:tar-0:1.13.25-15.RHEL3.s390",
          "3ES:tar-0:1.13.25-15.RHEL3.s390x",
          "3ES:tar-0:1.13.25-15.RHEL3.src",
          "3ES:tar-0:1.13.25-15.RHEL3.x86_64",
          "3ES:tar-debuginfo-0:1.13.25-15.RHEL3.i386",
          "3ES:tar-debuginfo-0:1.13.25-15.RHEL3.ia64",
          "3ES:tar-debuginfo-0:1.13.25-15.RHEL3.ppc",
          "3ES:tar-debuginfo-0:1.13.25-15.RHEL3.s390",
          "3ES:tar-debuginfo-0:1.13.25-15.RHEL3.s390x",
          "3ES:tar-debuginfo-0:1.13.25-15.RHEL3.x86_64",
          "3WS:tar-0:1.13.25-15.RHEL3.i386",
          "3WS:tar-0:1.13.25-15.RHEL3.ia64",
          "3WS:tar-0:1.13.25-15.RHEL3.ppc",
          "3WS:tar-0:1.13.25-15.RHEL3.s390",
          "3WS:tar-0:1.13.25-15.RHEL3.s390x",
          "3WS:tar-0:1.13.25-15.RHEL3.src",
          "3WS:tar-0:1.13.25-15.RHEL3.x86_64",
          "3WS:tar-debuginfo-0:1.13.25-15.RHEL3.i386",
          "3WS:tar-debuginfo-0:1.13.25-15.RHEL3.ia64",
          "3WS:tar-debuginfo-0:1.13.25-15.RHEL3.ppc",
          "3WS:tar-debuginfo-0:1.13.25-15.RHEL3.s390",
          "3WS:tar-debuginfo-0:1.13.25-15.RHEL3.s390x",
          "3WS:tar-debuginfo-0:1.13.25-15.RHEL3.x86_64",
          "4AS:tar-0:1.14-12.RHEL4.i386",
          "4AS:tar-0:1.14-12.RHEL4.ia64",
          "4AS:tar-0:1.14-12.RHEL4.ppc",
          "4AS:tar-0:1.14-12.RHEL4.s390",
          "4AS:tar-0:1.14-12.RHEL4.s390x",
          "4AS:tar-0:1.14-12.RHEL4.src",
          "4AS:tar-0:1.14-12.RHEL4.x86_64",
          "4AS:tar-debuginfo-0:1.14-12.RHEL4.i386",
          "4AS:tar-debuginfo-0:1.14-12.RHEL4.ia64",
          "4AS:tar-debuginfo-0:1.14-12.RHEL4.ppc",
          "4AS:tar-debuginfo-0:1.14-12.RHEL4.s390",
          "4AS:tar-debuginfo-0:1.14-12.RHEL4.s390x",
          "4AS:tar-debuginfo-0:1.14-12.RHEL4.x86_64",
          "4Desktop:tar-0:1.14-12.RHEL4.i386",
          "4Desktop:tar-0:1.14-12.RHEL4.ia64",
          "4Desktop:tar-0:1.14-12.RHEL4.ppc",
          "4Desktop:tar-0:1.14-12.RHEL4.s390",
          "4Desktop:tar-0:1.14-12.RHEL4.s390x",
          "4Desktop:tar-0:1.14-12.RHEL4.src",
          "4Desktop:tar-0:1.14-12.RHEL4.x86_64",
          "4Desktop:tar-debuginfo-0:1.14-12.RHEL4.i386",
          "4Desktop:tar-debuginfo-0:1.14-12.RHEL4.ia64",
          "4Desktop:tar-debuginfo-0:1.14-12.RHEL4.ppc",
          "4Desktop:tar-debuginfo-0:1.14-12.RHEL4.s390",
          "4Desktop:tar-debuginfo-0:1.14-12.RHEL4.s390x",
          "4Desktop:tar-debuginfo-0:1.14-12.RHEL4.x86_64",
          "4ES:tar-0:1.14-12.RHEL4.i386",
          "4ES:tar-0:1.14-12.RHEL4.ia64",
          "4ES:tar-0:1.14-12.RHEL4.ppc",
          "4ES:tar-0:1.14-12.RHEL4.s390",
          "4ES:tar-0:1.14-12.RHEL4.s390x",
          "4ES:tar-0:1.14-12.RHEL4.src",
          "4ES:tar-0:1.14-12.RHEL4.x86_64",
          "4ES:tar-debuginfo-0:1.14-12.RHEL4.i386",
          "4ES:tar-debuginfo-0:1.14-12.RHEL4.ia64",
          "4ES:tar-debuginfo-0:1.14-12.RHEL4.ppc",
          "4ES:tar-debuginfo-0:1.14-12.RHEL4.s390",
          "4ES:tar-debuginfo-0:1.14-12.RHEL4.s390x",
          "4ES:tar-debuginfo-0:1.14-12.RHEL4.x86_64",
          "4WS:tar-0:1.14-12.RHEL4.i386",
          "4WS:tar-0:1.14-12.RHEL4.ia64",
          "4WS:tar-0:1.14-12.RHEL4.ppc",
          "4WS:tar-0:1.14-12.RHEL4.s390",
          "4WS:tar-0:1.14-12.RHEL4.s390x",
          "4WS:tar-0:1.14-12.RHEL4.src",
          "4WS:tar-0:1.14-12.RHEL4.x86_64",
          "4WS:tar-debuginfo-0:1.14-12.RHEL4.i386",
          "4WS:tar-debuginfo-0:1.14-12.RHEL4.ia64",
          "4WS:tar-debuginfo-0:1.14-12.RHEL4.ppc",
          "4WS:tar-debuginfo-0:1.14-12.RHEL4.s390",
          "4WS:tar-debuginfo-0:1.14-12.RHEL4.s390x",
          "4WS:tar-debuginfo-0:1.14-12.RHEL4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-6097"
        },
        {
          "category": "external",
          "summary": "RHBZ#1618237",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618237"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-6097",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-6097"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-6097",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-6097"
        }
      ],
      "release_date": "2006-11-21T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-12-19T22:47:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.  Use Red Hat\nNetwork to download and update your packages.  To launch the Red Hat\nUpdate Agent, use the following command:\n\n    up2date\n\nFor information on how to install packages manually, refer to the\nfollowing Web page for the System Administration or Customization\nguide specific to your system:\n\n    http://www.redhat.com/docs/manuals/enterprise/",
          "product_ids": [
            "2.1AS:tar-0:1.13.25-6.AS21.1.i386",
            "2.1AS:tar-0:1.13.25-6.AS21.1.ia64",
            "2.1AS:tar-0:1.13.25-6.AS21.1.src",
            "2.1AW:tar-0:1.13.25-6.AS21.1.i386",
            "2.1AW:tar-0:1.13.25-6.AS21.1.ia64",
            "2.1AW:tar-0:1.13.25-6.AS21.1.src",
            "2.1ES:tar-0:1.13.25-6.AS21.1.i386",
            "2.1ES:tar-0:1.13.25-6.AS21.1.ia64",
            "2.1ES:tar-0:1.13.25-6.AS21.1.src",
            "2.1WS:tar-0:1.13.25-6.AS21.1.i386",
            "2.1WS:tar-0:1.13.25-6.AS21.1.ia64",
            "2.1WS:tar-0:1.13.25-6.AS21.1.src",
            "3AS:tar-0:1.13.25-15.RHEL3.i386",
            "3AS:tar-0:1.13.25-15.RHEL3.ia64",
            "3AS:tar-0:1.13.25-15.RHEL3.ppc",
            "3AS:tar-0:1.13.25-15.RHEL3.s390",
            "3AS:tar-0:1.13.25-15.RHEL3.s390x",
            "3AS:tar-0:1.13.25-15.RHEL3.src",
            "3AS:tar-0:1.13.25-15.RHEL3.x86_64",
            "3AS:tar-debuginfo-0:1.13.25-15.RHEL3.i386",
            "3AS:tar-debuginfo-0:1.13.25-15.RHEL3.ia64",
            "3AS:tar-debuginfo-0:1.13.25-15.RHEL3.ppc",
            "3AS:tar-debuginfo-0:1.13.25-15.RHEL3.s390",
            "3AS:tar-debuginfo-0:1.13.25-15.RHEL3.s390x",
            "3AS:tar-debuginfo-0:1.13.25-15.RHEL3.x86_64",
            "3Desktop:tar-0:1.13.25-15.RHEL3.i386",
            "3Desktop:tar-0:1.13.25-15.RHEL3.ia64",
            "3Desktop:tar-0:1.13.25-15.RHEL3.ppc",
            "3Desktop:tar-0:1.13.25-15.RHEL3.s390",
            "3Desktop:tar-0:1.13.25-15.RHEL3.s390x",
            "3Desktop:tar-0:1.13.25-15.RHEL3.src",
            "3Desktop:tar-0:1.13.25-15.RHEL3.x86_64",
            "3Desktop:tar-debuginfo-0:1.13.25-15.RHEL3.i386",
            "3Desktop:tar-debuginfo-0:1.13.25-15.RHEL3.ia64",
            "3Desktop:tar-debuginfo-0:1.13.25-15.RHEL3.ppc",
            "3Desktop:tar-debuginfo-0:1.13.25-15.RHEL3.s390",
            "3Desktop:tar-debuginfo-0:1.13.25-15.RHEL3.s390x",
            "3Desktop:tar-debuginfo-0:1.13.25-15.RHEL3.x86_64",
            "3ES:tar-0:1.13.25-15.RHEL3.i386",
            "3ES:tar-0:1.13.25-15.RHEL3.ia64",
            "3ES:tar-0:1.13.25-15.RHEL3.ppc",
            "3ES:tar-0:1.13.25-15.RHEL3.s390",
            "3ES:tar-0:1.13.25-15.RHEL3.s390x",
            "3ES:tar-0:1.13.25-15.RHEL3.src",
            "3ES:tar-0:1.13.25-15.RHEL3.x86_64",
            "3ES:tar-debuginfo-0:1.13.25-15.RHEL3.i386",
            "3ES:tar-debuginfo-0:1.13.25-15.RHEL3.ia64",
            "3ES:tar-debuginfo-0:1.13.25-15.RHEL3.ppc",
            "3ES:tar-debuginfo-0:1.13.25-15.RHEL3.s390",
            "3ES:tar-debuginfo-0:1.13.25-15.RHEL3.s390x",
            "3ES:tar-debuginfo-0:1.13.25-15.RHEL3.x86_64",
            "3WS:tar-0:1.13.25-15.RHEL3.i386",
            "3WS:tar-0:1.13.25-15.RHEL3.ia64",
            "3WS:tar-0:1.13.25-15.RHEL3.ppc",
            "3WS:tar-0:1.13.25-15.RHEL3.s390",
            "3WS:tar-0:1.13.25-15.RHEL3.s390x",
            "3WS:tar-0:1.13.25-15.RHEL3.src",
            "3WS:tar-0:1.13.25-15.RHEL3.x86_64",
            "3WS:tar-debuginfo-0:1.13.25-15.RHEL3.i386",
            "3WS:tar-debuginfo-0:1.13.25-15.RHEL3.ia64",
            "3WS:tar-debuginfo-0:1.13.25-15.RHEL3.ppc",
            "3WS:tar-debuginfo-0:1.13.25-15.RHEL3.s390",
            "3WS:tar-debuginfo-0:1.13.25-15.RHEL3.s390x",
            "3WS:tar-debuginfo-0:1.13.25-15.RHEL3.x86_64",
            "4AS:tar-0:1.14-12.RHEL4.i386",
            "4AS:tar-0:1.14-12.RHEL4.ia64",
            "4AS:tar-0:1.14-12.RHEL4.ppc",
            "4AS:tar-0:1.14-12.RHEL4.s390",
            "4AS:tar-0:1.14-12.RHEL4.s390x",
            "4AS:tar-0:1.14-12.RHEL4.src",
            "4AS:tar-0:1.14-12.RHEL4.x86_64",
            "4AS:tar-debuginfo-0:1.14-12.RHEL4.i386",
            "4AS:tar-debuginfo-0:1.14-12.RHEL4.ia64",
            "4AS:tar-debuginfo-0:1.14-12.RHEL4.ppc",
            "4AS:tar-debuginfo-0:1.14-12.RHEL4.s390",
            "4AS:tar-debuginfo-0:1.14-12.RHEL4.s390x",
            "4AS:tar-debuginfo-0:1.14-12.RHEL4.x86_64",
            "4Desktop:tar-0:1.14-12.RHEL4.i386",
            "4Desktop:tar-0:1.14-12.RHEL4.ia64",
            "4Desktop:tar-0:1.14-12.RHEL4.ppc",
            "4Desktop:tar-0:1.14-12.RHEL4.s390",
            "4Desktop:tar-0:1.14-12.RHEL4.s390x",
            "4Desktop:tar-0:1.14-12.RHEL4.src",
            "4Desktop:tar-0:1.14-12.RHEL4.x86_64",
            "4Desktop:tar-debuginfo-0:1.14-12.RHEL4.i386",
            "4Desktop:tar-debuginfo-0:1.14-12.RHEL4.ia64",
            "4Desktop:tar-debuginfo-0:1.14-12.RHEL4.ppc",
            "4Desktop:tar-debuginfo-0:1.14-12.RHEL4.s390",
            "4Desktop:tar-debuginfo-0:1.14-12.RHEL4.s390x",
            "4Desktop:tar-debuginfo-0:1.14-12.RHEL4.x86_64",
            "4ES:tar-0:1.14-12.RHEL4.i386",
            "4ES:tar-0:1.14-12.RHEL4.ia64",
            "4ES:tar-0:1.14-12.RHEL4.ppc",
            "4ES:tar-0:1.14-12.RHEL4.s390",
            "4ES:tar-0:1.14-12.RHEL4.s390x",
            "4ES:tar-0:1.14-12.RHEL4.src",
            "4ES:tar-0:1.14-12.RHEL4.x86_64",
            "4ES:tar-debuginfo-0:1.14-12.RHEL4.i386",
            "4ES:tar-debuginfo-0:1.14-12.RHEL4.ia64",
            "4ES:tar-debuginfo-0:1.14-12.RHEL4.ppc",
            "4ES:tar-debuginfo-0:1.14-12.RHEL4.s390",
            "4ES:tar-debuginfo-0:1.14-12.RHEL4.s390x",
            "4ES:tar-debuginfo-0:1.14-12.RHEL4.x86_64",
            "4WS:tar-0:1.14-12.RHEL4.i386",
            "4WS:tar-0:1.14-12.RHEL4.ia64",
            "4WS:tar-0:1.14-12.RHEL4.ppc",
            "4WS:tar-0:1.14-12.RHEL4.s390",
            "4WS:tar-0:1.14-12.RHEL4.s390x",
            "4WS:tar-0:1.14-12.RHEL4.src",
            "4WS:tar-0:1.14-12.RHEL4.x86_64",
            "4WS:tar-debuginfo-0:1.14-12.RHEL4.i386",
            "4WS:tar-debuginfo-0:1.14-12.RHEL4.ia64",
            "4WS:tar-debuginfo-0:1.14-12.RHEL4.ppc",
            "4WS:tar-debuginfo-0:1.14-12.RHEL4.s390",
            "4WS:tar-debuginfo-0:1.14-12.RHEL4.s390x",
            "4WS:tar-debuginfo-0:1.14-12.RHEL4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0749"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "security flaw"
    }
  ]
}