Read the docs
Red Hat Security Advisory

RHSA-2026:0435

tar security update

Released 2026-01-12 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 1 record

TI-2025-28801 CVE-2025-45582 · GHSA-f93m-9mq4-2fjj

Path traversal in GNU Tar

Priority MEDIUM 52

GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with a certain two-step process.

CVSS 3.1MEDIUM 4.1 Local No auth User interaction EPSS 0.0049 Published 2025-07-11 Partial fix CWE-24