Summary
[2:1.34-9]
- Fix the last patch to solve a regression with -x and --xattrs: RHEL-136277
also, fix another tiny mistake in the patch (w/o visible consequences)
[2:1.34-8]
- Backport upstream changes to jailify extraction directory
Includes related gnulib changes to add openat2
Fixes CVE-2025-45582
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | tar | 2:1.34-9.el9_7 |
Vulnerabilities 1
-
Medium 4.1
GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with a certain two-step pro…