PT-2026-29963 · Tar-Rs · Tar-Rs

Publicado 2026-04-01 · Atualizado 2026-04-01

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions tar-rs versions prior to 0.4.40-1ubuntu0.1

Description A flaw was found in tar-rs related to symlink handling during tar archive extraction. A crafted tar archive could allow a remote attacker to modify permissions of directories outside the extraction root, potentially leading to privilege escalation.

Recommendations Update to tar-rs version 0.4.40-1ubuntu0.1 or later.

Identificadores relacionados

USN-8138-1

Produtos afetados

Tar-Rs

Referências · 3

• https://ubuntu.com/security/notices/USN-8138-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-8138-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2026-33056 · Aviso do Fabricante