Skip to content

Conversation

@thaJeztah
Copy link
Member

  • archive/tar: set a limit on the size of GNU sparse file 1.0 regions
  • fixes CVE-2025-58183

full diff: vbatts/tar-split@v0.12.1...v0.12.2

- archive/tar: set a limit on the size of GNU sparse file 1.0 regions
- fixes CVE-2025-58183

full diff: vbatts/tar-split@v0.12.1...v0.12.2

Signed-off-by: Sebastiaan van Stijn <[email protected]>
@github-actions github-actions bot added the area/dependencies Pull requests that update a dependency file label Nov 11, 2025
@tonistiigi tonistiigi added this to the v0.26.0 milestone Nov 11, 2025
@tonistiigi tonistiigi merged commit cc2d332 into moby:master Nov 11, 2025
199 of 201 checks passed
@thaJeztah thaJeztah deleted the bump_tarsplit branch November 11, 2025 18:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants