Debian/tar: unknown

GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite arbitrary files via a tar file that contains a GNUTYPE_NAMES record with a symbolic link, which is not

Action: Upgrade tar to 1.16-2 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2006-6097#Debian:14/tar
• https://security-tracker.debian.org/tracker/CVE-2006-6097

published 2006-11-24T18:07:00Z · modified 2026-10-22T23:47:21.042493969Z · JSON