Summary
[2:1.35-9]
- Fix a tiny mistake in the last patch affecting hardling extraction
(w/o visible consequences)
[2:1.35-8]
- Backport upstream changes to jailify extraction directory
Includes related gnulib changes to add openat2
Fixes CVE-2025-45582
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | tar | 2:1.35-9.el10_1 |
Vulnerabilities 1
-
Medium 4.1
GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with a certain two-step pro…