rust-async-tar vulnerabilities (Ubuntu)

2 vulnerabilities.

• rust-async-tar Ubuntu async-tar PAX extension-header desync enables tar entry/content smuggling CVE-2026-53600 Fix available 6.3 MediumJuly 8, 2026
• rust-async-tar Ubuntu tar-rs: unpack_in can chmod arbitrary directories by following symlinks CVE-2026-33056 Fix available 5.1 MediumMarch 19, 2026