This bug was fixed in the package tar - 1.35+dfsg-4ubuntu0.4
---------------
tar (1.35+dfsg-4ubuntu0.4) resolute-security; urgency=medium
* SECURITY REGRESSION: Old archives with nonzero directory sizes
failing to be extracted
- debian/patches/CVE-2026-5704-5.patch: fix this by forcing
the size to zero for DIRTYPE in read_header() in src/list.c
(LP: #2161311)
-- Leonidas Da Silva Barbosa <[email protected]> Mon, 20 Jul
2026 10:45:02 -0300
** Changed in: tar (Ubuntu)
Status: Triaged => Fix Released
** CVE added: https://cve.org/CVERecord?id=CVE-2026-5704
** Changed in: tar (Ubuntu)
Status: Triaged => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2161311
Title:
Regression in the recent security update
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/tar/+bug/2161311/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
