Red Hat has issued updates for unzip and tar. These fix a vulnerability, which can be exploited by malicious people to cause files to be extracted to arbitrary locations on a user's system.

The vulnerability is caused due to missing validation of filenames included in zip and tar archives. This can be exploited to create and overwrite arbitrary files on a user's system with the user's privileges when the user extracts a specially crafted archive with unzip or tar.

Solution
Updated packages:
Further details available in Customer Area

Deep Links
Links available in Customer Area