Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-0406

Fixed in a distro release EPSS <1%CVSS 6.1

A flaw was discovered in the mholt/archiver package. This flaw allows an attacker to create a specially crafted tar file, which, when unpacked, may allow access to restricted files or directories. This issue can allow the creation or overwriting of files with the user's or application's privileges using the library.

Published 2024-04-06 · CVE record · OSV

Products: Red Hat OpenShift Container Platform 4.18, Red Hat Advanced Cluster Security 3, Red Hat Advanced Cluster Security 4

Fixed upstream

EcosystemPackageFixed in
Gogithub.com/mholt/archiverno fix
Gogithub.com/mholt/archiver/v3no fix

Distro releases

ReleasePackageFixed in
Chainguardchainctl0.2.59-r0
Chainguarddatadog-agent7.52.1-r2
Chainguarddatadog-agent-core-integrations7.52.1-r2
Chainguarddatadog-agent-core-integrations-fips7.54.0-r0
Chainguarddatadog-agent-fakeintake7.52.1-r2
Chainguarddatadog-agent-fakeintake-fips7.54.0-r0
Chainguarddatadog-agent-fips7.54.0-r0
Chainguarddatadog-agent-jmx7.52.1-r2
Chainguarddatadog-agent-jmx-fips7.54.0-r0
Chainguarddatadog-agent-oci-compat7.52.1-r2
Chainguarddatadog-agent-oci-compat-fips7.54.0-r0
Chainguarddatadog-agent-s6-overlay7.52.1-r2
Chainguarddatadog-agent-s6-overlay-fips7.54.0-r0
Chainguarddatadog-cluster-agent7.54.0-r0
Chainguarddatadog-cluster-agent7.52.1-r2
Chainguarddatadog-cluster-agent-fips7.54.0-r0
Chainguarddatadog-cluster-agent-oci-compat7.52.1-r2
Chainguarddatadog-cluster-agent-oci-compat7.54.0-r0
Chainguarddatadog-cluster-agent-oci-compat-fips7.54.0-r0
Chainguarddocker-credential-cgr0.2.59-r0
Chainguarddogstatsd7.52.1-r2
Chainguardfilebrowser2.45.0-r0
Chainguardgotenberg8.5.0-r0
Chainguardk9s0.32.4-r3
Chainguardkots1.128.3-r0
Chainguardkubescape3.0.10-r0
Chainguardmattermost-10.010.0.4-r3
Chainguardmattermost-10.0-compat10.0.4-r3
Chainguardmattermost-10.110.1.6-r1
Chainguardmattermost-10.1-compat10.1.6-r1
Chainguardmattermost-10.210.2.1-r4
Chainguardmattermost-10.2-compat10.2.1-r4
Chainguardmattermost-10.310.3.1-r1
Chainguardmattermost-10.3-compat10.3.1-r1
Chainguardmattermost-10.410.4.2-r0
Chainguardmattermost-10.4-compat10.4.2-r0
Chainguardmattermost-10.710.7.3-r1
Chainguardmattermost-10.710.7.4-r5
Chainguardmattermost-10.7-compat10.7.3-r1
Chainguardmattermost-10.910.9.2-r1
Chainguardmattermost-10.9-compat10.9.2-r1
Chainguardmattermost-9.119.11.18-r4
Chainguardmattermost-fips-10.910.9.2-r1
Chainguardmattermost-fips-10.9-compat10.9.2-r1
Chainguardnuclei3.2.5-r1
Chainguardopenbao0
Chainguardopenbao-compat0
Chainguardopenbao-fips0
Chainguardterragrunt0.64.0-r0
Chainguardterragrunt-docs0.64.0-r0
Chainguardvault-1.161.16.3-r37
Chainguardvault-fips-1.141.14.11-r2
Chainguardvault-fips-1.14-compat1.14.11-r2
Chainguardwolfictl0.16.6-r1
Chainguardzarf0.33.1-r1
Wolfidatadog-agent7.52.1-r2
Wolfidatadog-agent-core-integrations7.52.1-r2
Wolfidatadog-agent-fakeintake7.52.1-r2
Wolfidatadog-agent-jmx7.52.1-r2
Wolfidatadog-agent-oci-compat7.52.1-r2
Wolfidatadog-agent-s6-overlay7.52.1-r2
Wolfidatadog-cluster-agent7.54.0-r0
Wolfidatadog-cluster-agent7.52.1-r2
Wolfidatadog-cluster-agent-oci-compat7.52.1-r2
Wolfidatadog-cluster-agent-oci-compat7.54.0-r0
Wolfidogstatsd7.52.1-r2
Wolfifilebrowser2.45.0-r0
Wolfik9s0.32.4-r3
Wolfikots1.128.3-r0
Wolfikubescape3.0.10-r0
Wolfimattermost-10.010.0.4-r3
Wolfimattermost-10.0-compat10.0.4-r3
Wolfimattermost-10.110.1.6-r1
Wolfimattermost-10.1-compat10.1.6-r1
Wolfimattermost-10.210.2.1-r4
Wolfimattermost-10.2-compat10.2.1-r4
Wolfimattermost-10.310.3.1-r1
Wolfimattermost-10.3-compat10.3.1-r1
Wolfimattermost-10.410.4.2-r0
Wolfimattermost-10.4-compat10.4.2-r0
Wolfimattermost-10.710.7.4-r5
Wolfimattermost-10.910.9.2-r1
Wolfimattermost-10.9-compat10.9.2-r1
Wolfinuclei3.2.5-r1
Wolfiopenbao0
Wolfiopenbao-compat0
Wolfiterragrunt0.64.0-r0
Wolfiterragrunt-docs0.64.0-r0
Wolfiwolfictl0.16.6-r1
Wolfizarf0.33.1-r1
openSUSE Leap 16.0hauler1.3.1-bp160.1.1
openSUSE Tumbleweedhauler1.2.2-1.1
openSUSE Tumbleweedsubfinder2.7.0-2.1