Summary
The GNU tar program can save multiple files in an archive and restore files from an archive.
Security Fix(es):
* tar: Tar path traversal (CVE-2025-45582)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 10 | tar | 2:1.35-9.el10_1 |
Vulnerabilities 1
-
Medium 4.1
GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with a certain two-step pro…
References
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2379592