97 matches found
CLEANSTART-2026-VI90529 tar-rs is a tar archive reading/writing library for Rust
Security vulnerability affects the rust package. tar-rs is a tar archive reading/writing library for Rust...
CLEANSTART-2026-HL90229 tar-rs is a tar archive reading/writing library for Rust
Security vulnerability affects the rust package. tar-rs is a tar archive reading/writing library for Rust...
CLEANSTART-2026-NS62471 tar-rs is a tar archive reading/writing library for Rust
CVE-2026-33056 affects multiple packages. tar-rs is a tar archive reading/writing library for Rust. See references for individual vulnerability details...
CLEANSTART-2026-MZ75626 tar-rs is a tar archive reading/writing library for Rust
CVE-2026-33055 affects multiple packages. tar-rs is a tar archive reading/writing library for Rust. See references for individual vulnerability details...
Astra Linux – vulnerability in rustc, rustc-1.80
Tar-rs is a tar archive reading/writing library for Rust. In versions 0.4.44 and earlier, when unpacking a tar archive, the tar crate’s unpackdir function uses fs::metadata to determine whether a path that already exists is a directory. Since fs::metadata follows symbolic links, a specially craft...
Rocky Linux 9.6 [TuxCare] Security Update: cargo / clippy / rust / rust-analyzer / rust-debugger-common / etc (ALMALINUX9.6:CLSA-2026:1788535576)
The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1788535576 advisory. - tar-rs is a tar archive reading/writing library for Rust. In versions 0.4.44 and below, when unpacking a tar archive, the tar crate's...
AlmaLinux 9.6 [TuxCare] Security Update: cargo / clippy / rust / rust-analyzer / rust-debugger-common / etc (ALMALINUX9.6:CLSA-2026:1788535576)
The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1788535576 advisory. - tar-rs is a tar archive reading/writing library for Rust. In versions 0.4.44 and below, when unpacking a tar archive, the tar crate's...
CVE-2026-70622
A flaw was found in tar-rs. This vulnerability, a symlink escape, allows a local attacker to read sensitive files outside of the intended directory. By planting specially crafted symbolic links in an untrusted directory, an attacker can trick a privileged process, when archiving that directory,...
Linux Distros Unpatched Vulnerability : CVE-2026-70622
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tar-rs versions 0.4.11 through 0.4.46 contain a symlink escape vulnerability in the Builder::appenddirall function that allows attackers to read files outside t...
AZL-95589 CVE-2026-70622 affecting package tardev-snapshotter 3.2.0.tardev1-11
tar-rs versions 0.4.11 through 0.4.46 contain a symlink escape vulnerability in the Builder::appenddirall function that allows attackers to read files outside the intended source root directory by planting symlinks in an attacker-controlled directory. When a privileged process archives an untrust...
AZL-95631 CVE-2026-70622 affecting package rust for versions less than 1.96.0-1
tar-rs versions 0.4.11 through 0.4.46 contain a symlink escape vulnerability in the Builder::appenddirall function that allows attackers to read files outside the intended source root directory by planting symlinks in an attacker-controlled directory. When a privileged process archives an untrust...
AZL-95628 CVE-2026-70622 affecting package rust for versions less than 1.75.0-30
tar-rs versions 0.4.11 through 0.4.46 contain a symlink escape vulnerability in the Builder::appenddirall function that allows attackers to read files outside the intended source root directory by planting symlinks in an attacker-controlled directory. When a privileged process archives an untrust...
AZL-95625 CVE-2026-70622 affecting package rpm-ostree 2024.4-11
tar-rs versions 0.4.11 through 0.4.46 contain a symlink escape vulnerability in the Builder::appenddirall function that allows attackers to read files outside the intended source root directory by planting symlinks in an attacker-controlled directory. When a privileged process archives an untrust...
AZL-95592 CVE-2026-70622 affecting package clamav 1.5.4-3
tar-rs versions 0.4.11 through 0.4.46 contain a symlink escape vulnerability in the Builder::appenddirall function that allows attackers to read files outside the intended source root directory by planting symlinks in an attacker-controlled directory. When a privileged process archives an untrust...
AZL-95607 CVE-2026-70622 affecting package kata-containers-cc 3.15.0.aks0-24
tar-rs versions 0.4.11 through 0.4.46 contain a symlink escape vulnerability in the Builder::appenddirall function that allows attackers to read files outside the intended source root directory by planting symlinks in an attacker-controlled directory. When a privileged process archives an untrust...
CVE-2026-70622
tar-rs versions 0.4.11 through 0.4.46 contain a symlink escape vulnerability in the Builder::appenddirall function that allows attackers to read files outside the intended source root directory by planting symlinks in an attacker-controlled directory. When a privileged process archives an untrust...
AZL-95655 CVE-2026-70622 affecting package trident 0.30.0-1
tar-rs versions 0.4.11 through 0.4.46 contain a symlink escape vulnerability in the Builder::appenddirall function that allows attackers to read files outside the intended source root directory by planting symlinks in an attacker-controlled directory. When a privileged process archives an untrust...
AZL-95604 CVE-2026-70622 affecting package kata-containers 4.1.0.kata2-1
tar-rs versions 0.4.11 through 0.4.46 contain a symlink escape vulnerability in the Builder::appenddirall function that allows attackers to read files outside the intended source root directory by planting symlinks in an attacker-controlled directory. When a privileged process archives an untrust...
DEBIAN-CVE-2026-70622
tar-rs versions 0.4.11 through 0.4.46 contain a symlink escape vulnerability in the Builder::appenddirall function that allows attackers to read files outside the intended source root directory by planting symlinks in an attacker-controlled directory. When a privileged process archives an untrust...
UBUNTU-CVE-2026-70622
tar-rs versions 0.4.11 through 0.4.46 contain a symlink escape vulnerability in the Builder::appenddirall function that allows attackers to read files outside the intended source root directory by planting symlinks in an attacker-controlled directory. When a privileged process archives an untrust...