A dangerous case of tar archive unpacking This is a short story about how dangerous a trivial tar unpacking might be, and what can be done to minimize the risk or completely avoid it. The mistake Recently, I was practicing an installation of Void Linux via chroot using XBPS method. I needed the XBPS Package Manager installed on my Fedora Linux host to prepare Void Linux's base system. One of the options is to download an archive of statically built tools from the official repository. I chose h...