https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-05T20:52:58.329605+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2016-6321 CVE-2016-6321 2026-10-05T20:52:58.347661+00:00

Directory traversal vulnerability in the safer_name_suffix function in GNU tar 1.14 through 1.29 might allow remote attackers to bypass an intended protection mechanism and write to arbitrary files via vectors related to improper sanitization of the file_name parameter, aka POINTYFEATHER.

 https://vulnerability.circl.lu/vuln/usn-3132-1 USN-3132-1 — tar vulnerability 2026-10-05T20:52:58.347805+00:00

Affected: Ubuntu:14.04:LTS: tar, Ubuntu:16.04:LTS: tar

Harry Sintonen discovered that tar incorrectly handled extracting files when path names are specified on the command line. If a user or automated system were tricked into processing a specially crafted archive, an attacker could possibly overwrite arbitrary files.