> USN-8138-1: tar-rs vulnerability
[DATE: 01/04/2026 13:35]
[LANGUAGE: EN]
It was discovered that tar-rs incorrectly handled symlinks when unpacking a
tar archive. If a user or automated system were tricked into processing a
specially crafted tar archive, a remote attacker could use this issue to
modify permissions of arbitrary directories outside the extraction root,
and possibly escalate privileges.