OpenPKG Security Advisory OpenPKG-SA-2006.038 – The archive format utility GNU tar, versions up to and including 1.16, allows user-assisted attackers to overwrite arbitrary files via a TAR format file that contains a “GNUTYPE_NAMES” record with a symbolic link.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/52879/OpenPKG-SA-2006.038.txt
Source: https://packetstormsecurity.com/files/52879/OpenPKG-Security-Advisory-2006.38.html