Alerts This Week
Warning Icon 1 975
Alerts This Week
Warning Icon 1 975

Mageia 9 Tar Important Malicious Archive Injection CVE-2026-5704

mageia
Calendar Grey June 2, 2026
Dist Mageia Esm H88
A security update for Mageia 9 addresses a flaw in tar that allows hidden file injection by crafted archives.
Security update

Summary

Description: A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with fully attacker-controlled content. This bypasses pre-extraction inspection mechanisms, potentially allowing an attacker to introduce malicious files onto a system without detection. This update fixes the reported issue.

References

- https://bugs.mageia.org/show_bug.cgi?id=35350

- https://bugzilla.redhat.com/show_bug.cgi?id=2455360

- https://www.openwall.com/lists/oss-security/2026/04/11/10

- https://lists.gnu.org/archive/html/bug-tar/2026-03/msg00007.html

- https://www.cve.org/CVERecord?id=CVE-2026-5704

Topics%20covered

Topics Covered

security advisory important tar malicious archive Mageia file injection

Resolution

SRPMS

- 9/core/tar-1.35-4.mga9

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 02 Jun 2026
URL: https://advisories.mageia.org/MGASA-2026-0168.html
Type: security
CVE: CVE-2026-5704

Topics%20covered

Topics Covered

security advisory important tar malicious archive Mageia file injection

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here