From 3383975d3aa0eb7c58095277c68dba2e668fcae1 Mon Sep 17 00:00:00 2001
From: CentOS Sources <bugs@centos.org>
Date: Tue, 21 Feb 2023 08:47:23 +0000
Subject: [PATCH] import tar-1.30-6.el8_7.1

---
 SOURCES/tar-1.30-CVE-2022-48303.patch | 30 +++++++++++++++++++++++++++
 SPECS/tar.spec                        |  7 ++++++-
 2 files changed, 36 insertions(+), 1 deletion(-)
 create mode 100644 SOURCES/tar-1.30-CVE-2022-48303.patch

diff --git a/SOURCES/tar-1.30-CVE-2022-48303.patch b/SOURCES/tar-1.30-CVE-2022-48303.patch
new file mode 100644
index 0000000..1b6c8db
--- /dev/null
+++ b/SOURCES/tar-1.30-CVE-2022-48303.patch
@@ -0,0 +1,30 @@
+From 3da78400eafcccb97e2f2fd4b227ea40d794ede8 Mon Sep 17 00:00:00 2001
+From: Sergey Poznyakoff <gray@gnu.org>
+Date: Sat, 11 Feb 2023 11:57:39 +0200
+Subject: [PATCH] Fix boundary checking in base-256 decoder
+
+* src/list.c (from_header): Base-256 encoding is at least 2 bytes
+long.
+---
+ src/list.c | 5 +++--
+ 1 file changed, 3 insertions(+), 2 deletions(-)
+
+diff --git a/src/list.c b/src/list.c
+index 9fafc425..86bcfdd1 100644
+--- a/src/list.c
++++ b/src/list.c
+@@ -881,8 +881,9 @@ from_header (char const *where0, size_t digs, char const *type,
+ 	  where++;
+ 	}
+     }
+-  else if (*where == '\200' /* positive base-256 */
+-	   || *where == '\377' /* negative base-256 */)
++  else if (where <= lim - 2
++	   && (*where == '\200' /* positive base-256 */
++	       || *where == '\377' /* negative base-256 */))
+     {
+       /* Parse base-256 output.  A nonnegative number N is
+ 	 represented as (256**DIGS)/2 + N; a negative number -N is
+-- 
+2.38.1
+
diff --git a/SPECS/tar.spec b/SPECS/tar.spec
index 429b1f5..313c018 100644
--- a/SPECS/tar.spec
+++ b/SPECS/tar.spec
@@ -6,7 +6,7 @@ Summary: A GNU file archiving program
 Name: tar
 Epoch: 2
 Version: 1.30
-Release: 6%{?dist}
+Release: 6%{?dist}.1
 License: GPLv3+
 Group: Applications/Archiving
 URL: http://www.gnu.org/software/tar/
@@ -26,6 +26,7 @@ Patch13: tar-1.30-tests-dirrem.patch
 Patch14: tar-1.30-xgetcwd-null-return-check.patch
 Patch15: tar-1.30-padding-zeros.patch
 Patch16: tar-1.30-disk-read-error.patch
+Patch17: tar-1.30-CVE-2022-48303.patch
 
 # run "make check" by default
 %bcond_without check
@@ -131,6 +132,10 @@ fi
 %{_infodir}/tar.info*
 
 %changelog
+* Thu Feb 09 2023 Matej Mužila <mmuzila@redhat.com> - 1.30-6.1
+- Fix CVE-2022-48303
+- Resolves: CVE-2022-48303
+
 * Wed May 12 2021 Ondrej Dubaj <odubaj@redhat.com> - 1.30-6
 - added "padding with zeros" info message (#1913566)
 - do not report disk error as file shrank (#1913569)