VDB

GCVE-110-MAGEIA-2026-168

GCVE-110-MAGEIA-2026-168
Advisory Published
Vulnetix · Advisory published June 2, 2026
A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with fully attacker-controlled content. This bypasses pre-extraction inspection mechanisms, potentially allowing an attacker to introduce malicious files onto a system without detection. This update fixes the reported issue.
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageiatar0 (affected), 1.35-4.mga9 (unaffected)—

References

Updated tar packages fix security vulnerability
advisory
Updated tar packages fix security vulnerability
issue
Updated tar packages fix security vulnerability
issue
Updated tar packages fix security vulnerability
url
Updated tar packages fix security vulnerability
url

Browse GCVE Records

73,834 records in the GCVE database · Updated July 19, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›