Skip to content
OpenAdvisories
Medium USN-8168-1 1 CVE

rustc vulnerability

Published Apr 13, 2026 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that tar-rs embedded in rustc incorrectly handled
symlinks when unpacking a tar archive. If a user or automated system were
tricked into processing a specially crafted tar archive, a remote attacker
could use this issue to modify permissions of arbitrary directories outside
the extraction root, and possibly escalate privileges.

Fixed packages 30

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS rustc 1.75.0+dfsg0ubuntu1~bpo0-0ubuntu0.22.04.1
Ubuntu · 22.04 LTS 22.04:LTS rustc-1.62 1.62.1+dfsg1-1ubuntu0.22.04.3
Ubuntu · 22.04 LTS 22.04:LTS rustc-1.76 1.76.0+dfsg0ubuntu1~bpo0-0ubuntu0.22.04.1
Ubuntu · 22.04 LTS 22.04:LTS rustc-1.77 1.77.2+dfsg1ubuntu1~bpo0-0ubuntu0.22.04.1
Ubuntu · 22.04 LTS 22.04:LTS rustc-1.78 1.78.0+dfsg1ubuntu1~bpo0-0ubuntu0.22.04.1
Ubuntu · 22.04 LTS 22.04:LTS rustc-1.79 1.79.0+dfsg1ubuntu1~bpo0-0ubuntu0.22.04.1
Ubuntu · 22.04 LTS 22.04:LTS rustc-1.80 1.80.1+dfsg0ubuntu1~bpo0-0ubuntu0.22.04.1
Ubuntu · 22.04 LTS 22.04:LTS rustc-1.81 1.81.0+dfsg0ubuntu0-0ubuntu0.22.04.1
Ubuntu · 22.04 LTS 22.04:LTS rustc-1.82 1.82.0+dfsg0ubuntu0~jammy-0ubuntu0.22.04.1
Ubuntu · 22.04 LTS 22.04:LTS rustc-1.83 1.83.0+dfsg0ubuntu2~bpo2-0ubuntu2.22.04.1
Ubuntu · 22.04 LTS 22.04:LTS rustc-1.84 1.84.1+dfsg0ubuntu1~bpo10-0ubuntu4.22.04.1
Ubuntu · 22.04 LTS 22.04:LTS rustc-1.85 1.85.1+dfsg0ubuntu2~bpo0-0ubuntu1.22.04.1
Ubuntu · 22.04 LTS 22.04:LTS rustc-1.89 1.89.0+dfsg~24.04-0ubuntu0.22.04.2
Ubuntu · 22.04 LTS 22.04:LTS rustc-1.91 1.91.1+dfsg~22.04-0ubuntu0.22.04.3
Ubuntu · 24.04 LTS 24.04:LTS rustc 1.75.0+dfsg0ubuntu1-0ubuntu7.4
Ubuntu · 24.04 LTS 24.04:LTS rustc-1.74 1.74.1+dfsg0ubuntu1-0ubuntu15
Ubuntu · 24.04 LTS 24.04:LTS rustc-1.76 1.76.0+dfsg0ubuntu1-0ubuntu0.24.04.2
Ubuntu · 24.04 LTS 24.04:LTS rustc-1.77 1.77.2+dfsg1ubuntu1-0ubuntu0.24.04.1
Ubuntu · 24.04 LTS 24.04:LTS rustc-1.78 1.78.0+dfsg1ubuntu1-0ubuntu0.24.04.2
Ubuntu · 24.04 LTS 24.04:LTS rustc-1.79 1.79.0+dfsg1ubuntu1-0ubuntu0.24.04.1
Ubuntu · 24.04 LTS 24.04:LTS rustc-1.80 1.80.1+dfsg0ubuntu1-0ubuntu0.24.04.01
Ubuntu · 24.04 LTS 24.04:LTS rustc-1.81 1.81.0+dfsg0ubuntu1-0ubuntu0.24.04.1
Ubuntu · 24.04 LTS 24.04:LTS rustc-1.82 1.82.0+dfsg0ubuntu0-0ubuntu0.24.04.1
Ubuntu · 24.04 LTS 24.04:LTS rustc-1.83 1.83.0+dfsg0ubuntu1~bpo2-0ubuntu0.24.04.1
Ubuntu · 24.04 LTS 24.04:LTS rustc-1.84 1.84.1+dfsg0ubuntu1~bpo2-0ubuntu2.24.04.1
Ubuntu · 24.04 LTS 24.04:LTS rustc-1.85 1.85.1+dfsg0ubuntu2~bpo0-0ubuntu0.24.04.2
Ubuntu · 24.04 LTS 24.04:LTS rustc-1.89 1.89.0+dfsg~24.04-0ubuntu0.24.04.2
Ubuntu · 24.04 LTS 24.04:LTS rustc-1.91 1.91.1+dfsg~24.04-0ubuntu0.24.04.2
Ubuntu · 25.10 rustc-1.85 1.85.1+dfsg0ubuntu2-0ubuntu1.25.04.1
Ubuntu · 25.10 rustc-1.88 1.88.0+dfsg0ubuntu1-0ubuntu2

Vulnerabilities 1

  • Medium 5.1
    CVE-2026-33056

    tar-rs: unpack_in can chmod arbitrary directories by following symlinks

    tar-rs is a tar archive reading/writing library for Rust. In versions 0.4.44 and below, when unpacking a tar archive, the tar crate's unpack_dir function uses fs::metadata() to check whether a path that already exists is a directory. Because fs::metadata() fo…

    alexcrichton tar-rs rust wasmcloud Debian Ubuntu Azure Linux Alpine Wolfi crates.io

References

  • report
    https://ubuntu.com/security/CVE-2026-33056