The libtar packages contain a C library for manipulating tar archives. The library supports both the strict POSIX tar format and many of the commonly used GNU extensions. Security Fix: * libtar: out-of-bounds read in gnu_longlink * libtar: out-of-bounds read in gnu_longname * libtar: memory leak found in th_read function * libtar: memory leak found in th_read function For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.8 Release Notes linked from the References section.