Description: A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with fully attacker-controlled content. This bypasses pre-extraction inspection mechanisms, potentially allowing an attacker to introduce malicious files onto a system without detection. This update fixes the reported issue.
Description: A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with fully attacker-controlled content. This bypasses pre-extraction inspection mechanisms, potentially allowing an attacker to introduce malicious files onto a system without detection. This update fixes the reported issue.
- - - - -
-
-
-
-
-
Warning : Undefined array key "block" in /var/www/ on line 17 Warning : Undefined array key "block" in /var/www/ on line 21 Warning : foreach() argument must be of type array|object, null given in /var/www/ on line 21
- 9/core/tar-1.35-4.mga9
- 9/core/tar-1.35-4.mga9
Publication date: 02 Jun 2026 URL: https: //advisories.mageia.org/MGASA-2026-0168.html Type: security CVE: CVE-2026-5704
Get the latest Linux and open source security news straight to your inbox.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
