crates.io PACKAGE

tar 0.4.44

Warn

PkgFire would install this release with a warning.·Checked 15 hours ago·Published 22 February 2025

crates.io

Why

  • warnVulnerability

    `unpack_in` can chmod arbitrary directories by following symlinks (fixed in 0.4.45)

  • warnVulnerability

    tar-rs incorrectly ignores PAX size headers if header size is nonzero (fixed in 0.4.45)

  • warnVulnerability

    tar has a PAX header desynchronization issue (fixed in 0.4.46)

  • warnVulnerability

    tar-rs incorrectly ignores PAX size headers if header size is nonzero (fixed in 0.4.45)

  • warnVulnerability

    tar-rs `unpack_in` can chmod arbitrary directories by following symlinks (fixed in 0.4.45)

Other checked releases

Check every dependency before it installs

This page is one release. PkgFire checks every package in your lockfile, on every install and in every pull request, and blocks the bad ones before they run.

Start free How it works