USN-8477-3 tar regression

USN-8477-1 fixed a vulnerability in tar. That fix was incomplete and could cause tar to fail to extract old archives that recorded a nonzero size for directory entries, resulting in a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was...

CVE-2026-55738

A flaw was found in microtar. A remote attacker can exploit a stack-based buffer overflow vulnerability in the rawtoheader function by supplying a specially crafted TAR Tape Archive file. When the victim opens or parses this archive, the flaw can lead to an out-of-bounds read and a stack buffer...

Malcontent security vulnerabilities

Malcontent is a supply chain attack detection tool developed by Chainguard. Versions of Malcontent prior to 1.20.3 contained a security vulnerability. This vulnerability stemmed from the possibility of creating symbolic links outside of the expected extraction directories when scanning specially...

CVE-2023-2868

A remote command injection vulnerability exists in the Barracuda Email Security Gateway appliance form factor only product effecting versions 5.1.3.001-9.2.0.006. The vulnerability arises out of a failure to comprehensively sanitize the processing of .tar file tape archives. The vulnerability ste...

ClamAV <= 0.99.2 Multiple Vulnerabilities - Linux

ClamAV is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:clamav:clamav"; ifdescription...

CVE-2016-9086

GitLab versions 8.9.x and above contain a critical security flaw in the "import/export project" feature of GitLab. Added in GitLab 8.9, this feature allows a user to export and then re-import their projects as tape archive files tar. All GitLab versions prior to 8.13.0 restricted this feature to...

CVE-2016-9086

Removed by vendor...

CVE-2016-9086

CVE-2016-9086 affects GitLab (CE/EE) versions 8.9.x to 8.13.x with the import/export project feature. The vulnerability arises from improper validation of symbolic links in user-supplied tar archives during export/import, enabling an authenticated user to access files reachable by the GitLab serv...

Fedora Update for star FEDORA-2007-1852

Check for the Version of star OpenVAS Vulnerability Test Fedora Update for star FEDORA-2007-1852 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...