Critical Vulnerability in Tar Utility Allows File Overwrites

A vulnerability in the tar utility was discovered, affecting multiple Ubuntu versions. The issue arises from incorrect handling of symlinks during archive extraction, potentially allowing attackers to overwrite arbitrary files. This vulnerability is identified as USN-8510-1 and is associated with CVE-2025. Affected versions include Ubuntu 26.04 LTS, 24.04 LTS, and 22.04 LTS. Users are advised to update their systems to mitigate the risk. The vulnerability poses a significant threat to system integrity if exploited. Ubuntu Pro offers ten-year security coverage for affected packages. The vulnerability was disclosed on July 6, 2026, and is critical for users of the tar utility.

Key Points: • A critical vulnerability in tar allows file overwrites via symlink mishandling. • Affected Ubuntu versions include 26.04, 24.04, and 22.04 LTS. • Users are urged to update their systems to prevent potential exploitation.