A new Debian Linux update has been published: Tar security update for Debian 10
Tar security update for Debian 10
Updated tar packages are available for Debian GNU/Linux 10 LTS to address the incorrect handling of extension attributes in PAX archives: [DLA 3755-1] tar security update