tar could be made to overwrite files.
Software Description:
- tar: GNU tar archive utility
Details:
It was discovered that tar incorrectly handled symlinks when extracting
archives. An attacker could possibly use this issue to overwrite arbitrary
files.
The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS tar 1.35+dfsg-4ubuntu0.2 Ubuntu 24.04 LTS tar 1.35+dfsg-3ubuntu0.2 Ubuntu 22.04 LTS tar 1.34+dfsg-1ubuntu0.1.22.04.4 In general, a standard system update will make all the necessary changes.
https://ubuntu.com/security/notices/USN-8510-1
CVE-2025-45582
Get the latest Linux and open source security news straight to your inbox.