Explore top 10 tips to secure your open-source projects now. Read More
×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Loading...
Explore Latest Linux Security advisories
We found 0 articles for you...
203
security advisoryimportanttarMageia 9 Tar Important Malicious Archive Injection CVE-2026-5704
Security update. Publication date: 02 Jun 2026 URL: https://advisories.mageia.org/MGASA-2026-0168.html Type: security Affected Mageia releases: 9 CVE: CVE-2026-5704 Description: A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with fully attacker-controlled content. This bypasses pre-extraction inspection mechanisms, potentially allowing an attacker to introduce malicious files onto a system without detection. This update fixes the reported issue. References: - https://bugs.mageia.org/show_bug.cgi?id=35350 - https://bugzilla.redhat.com/show_bug.cgi?id=2455360 - https://www.openwall.com/lists/oss-security/2026/04/11/10 - https://lists.gnu.org/archive/html/bug-tar/2026-03/msg00007.html - https://www.cve.org/CVERecord?id=CVE-2026-5704 SRPMS: - 9/core/tar-1.35-4.mga9 . A security update for Mageia 9 addresses a flaw in tar that allows hidden file injection by crafted archives.. Mageia Security Update, Tar Vulnerability, Remote Exploit, Hidden File Injection. . Severity: Important. LinuxSecurity.com Team
Jun 02, 2026
•Important
Mageia
203
security advisorycritical issuesecurity updateMageia 9: MGASA-2025-0061 Critical Threat: Ark Path Extraction Risk
A security issue exists in Ark where a maliciously crafted archive containing file paths beginning with "/" allows files to be extracted to locations outside the intended directory. References: . MGASA-2025-0061 - Updated ark packages fix security vulnerability Publication date: 13 Feb 2025 URL: https://advisories.mageia.org/MGASA-2025-0061.html Type: security Affected Mageia releases: 9 CVE: CVE-2024-57966 A security issue exists in Ark where a maliciously crafted archive containing file paths beginning with "/" allows files to be extracted to locations outside the intended directory. References: - https://bugs.mageia.org/show_bug.cgi?id=34013 - https://kde.org/info/security/advisory-20250207-1.txt - https://www.cve.org/CVERecord?id=CVE-2024-57966 SRPMS: - 9/core/ark-23.04.3-1.1.mga9 . Investigate the Mageia security notice MGASA-2025-0061 detailing a vulnerability in ark that permits unauthorized access for file extraction.. Mageia Ark Security Advisory, Path Extraction Issue, Malicious Archive Exploit. . Severity: Critical. LinuxSecurity.com Team
Feb 13, 2025
•Critical
Mageia
87
security advisorydebiansecurity fixDebian: DSA-4759-1 Moderate: Ark Extraction Directory Vulnerability
Fabian Vogt reported that the Ark archive manager did not sanitise extraction paths, which could result in maliciously crafted archives with symlinks writing outside the extraction directory. . - ------------------------------------------------------------------------- Debian Security Advisory DSA-4759-1
Sep 04, 2020
Debian
203
security advisorysymlinkmalicious archiveMageia 7: 2020-0353 Moderate: Ark Malicious TAR Extraction Risk
A maliciously crafted TAR archive containing symlink entries would install files anywhere in the user's home directory upon extraction (CVE-2020-24654). References: - https://bugs.mageia.org/show_bug.cgi?id=27214 . MGASA-2020-0353 - Updated ark packages fix security vulnerability Publication date: 29 Aug 2020 URL: https://advisories.mageia.org/MGASA-2020-0353.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-24654 A maliciously crafted TAR archive containing symlink entries would install files anywhere in the user's home directory upon extraction (CVE-2020-24654). References: - https://bugs.mageia.org/show_bug.cgi?id=27214 - https://kde.org/info/security/advisory-20200827-1.txt - https://www.cve.org/CVERecord?id=CVE-2020-24654 SRPMS: - 7/core/ark-19.04.0-1.2.mga7 . A malicious TAR package can present security threats by placing files in user folders. Revised information for Mageia 7 has been incorporated.. Mageia Security Update, Ark Package Vulnerability, TAR Archive Security Issue, Malware Risk in TAR, Mageia 2020 Advisory. . LinuxSecurity.com Team
Aug 29, 2020
Mageia
172
security advisorycriticalinformation disclosureUbuntu 20.04 LTS: 4461-1 Critical: Ark File Extraction Risk
Ark could be made to write files as your login if it opened a specially crafted file.. =========================================================================Ubuntu Security Notice USN-4461-1 August 18, 2020 ark vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS Summary: Ark could be made to write files as your login if it opened a specially crafted file. Software Description: - ark: archive utility Details: Dominik Penner discovered that Ark did not properly sanitize zip archive files before performing extraction. An attacker could use this to construct a malicious zip archive that, when opened, would create files outside the extraction directory. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS: ark 4:19.12.3-0ubuntu1.1 Ubuntu 18.04 LTS: ark 4:17.12.3-0ubuntu1.1 After a standard system update you need to restart Ark to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-4461-1 CVE-2020-16116 Package Information: https://launchpad.net/ubuntu/+source/ark/4:19.12.3-0ubuntu1.1 https://launchpad.net/ubuntu/+source/ark/4:17.12.3-0ubuntu1.1 . A serious vulnerability in the Ark application on Ubuntu could allow unauthorized file changes during user login, creating major security risks. Apply updates promptly to protect your systems. Ark Security, Ubuntu Threats, File Extraction Issues, Archive Utility Vulnerability. . Severity: Critical. LinuxSecurity.com Team
Aug 18, 2020
•Critical
Ubuntu
89
security advisorysecurity updatefedoraFedora 31 Ark Security Advisory FEDORA-2020-cac5ae9b6e: Moderate DoS Risk
Security update for CVE-2020-16116, https://kde.org/info/security/advisory-20200730-1.txt. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-cac5ae9b6e 2020-08-09 03:12:26.543960 --------------------------------------------------------------------------------Name : ark Product : Fedora 31 Version : 20.04.3 Release : 3.fc31 URL : https://apps.kde.org//utilities/ark/ Summary : Archive manager Description : Ark is a program for managing various archive formats. Archives can be viewed, extracted, created and modified from within Ark. The program can handle various formats such as tar, gzip, bzip2, zip, rar and lha (if appropriate command-line programs are installed). --------------------------------------------------------------------------------Update Information: Security update for CVE-2020-16116, https://kde.org/info/security/advisory-20200730-1.txt --------------------------------------------------------------------------------ChangeLog: * Fri Jul 31 2020 Rex Dieter - 20.04.3-3 - backport security fix for CVE-2020-16116 * Mon Jul 27 2020 Fedora Release Engineering - 20.04.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Fri Jul 10 2020 Rex Dieter - 20.04.3-1 - 20.04.3 * Fri Jun 12 2020 Rex Dieter - 20.04.2-1 - 20.04.2 * Wed May 27 2020 Rex Dieter - 20.04.1-1 - 20.04.1 * Sat Mar 7 2020 Rex Dieter - 19.12.3-1 - 19.12.3 * Tue Feb 4 2020 Rex Dieter - 19.12.2-1 - 19.12.2 * Fri Jan 31 2020 Rex Dieter - 19.12.1-1 - 19.12.1 * Tue Jan 28 2020 Fedora Release Engineering - 19.08.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Tue Nov 12 2019 Rex Dieter - 19.08.3-1 - 19.08.3 * Thu Oct 17 2019 Rex Dieter - 19.08.2-1 - 19.08.2 * Fri Oct 4 2019 Rex Dieter - 19.08.1-1 - 19.08.1 --------------------------------------------------------------------------------References: [ 1 ] Bug #1862464 -CVE-2020-16116 ark: maliciously crafted archive can install files anywhere in the user's home directory https://bugzilla.redhat.com/show_bug.cgi?id=1862464 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-cac5ae9b6e' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Aug 08, 2020
•Important
Fedora
87
security advisoryDebianpath sanitizationDebian: DSA-4738-1 Moderate: Ark Archive Manager Path Issue
Dominik Penner discovered that the Ark archive manager did not sanitise extraction paths, which could result in maliciously crafted archives writing outside the extraction directory. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-4738-1
Jul 31, 2020
Debian
87
security advisorydebiandirectory traversalDebian: DSA-3289-1 Critical: P7zip Directory Traversal Issue
Alexander Cherepanov discovered that p7zip is susceptible to a directory traversal vulnerability. While extracting an archive, it will extract symlinks and then follow them if they are referenced in further entries. This can be exploited by a rogue archive to write . - ------------------------------------------------------------------------- Debian Security Advisory DSA-3289-1
Jun 15, 2015
•Critical
Debian
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!