Security News

Cybersecurity news aggregator

🐧
LOW Updates Ubuntu Security

USN-8477-3: tar regression

  • What: A regression in tar was fixed in USN-8477-3.
  • Impact: Affected systems using tar for archive extraction.
Read Full Article →

USN-8477-1 fixed a vulnerability in tar. That fix was incomplete and could cause tar to fail to extract old archives that recorded a nonzero size for directory entries, resulting in a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that tar incorrectly handled certain crafted archive files. An attacker could possibly use this to inject hidden files with attacker-controlled content, bypassing pre-extraction inspection mechanisms.

Share this article