[CLSA-2026:1789128477] tar: Fix of CVE-2026-18508
Type:
security
Severity:
Moderate
Release date:
2026-09-11 12:08:17 UTC
Description:
- CVE-2026-18508: confine hard link targets to the --one-top-level directory, so a crafted archive can no longer alias a file outside it; this also repairs extraction of legitimate hard links under --one-top-level
CVEs fixed:
Updated packages:
  • tar-1.34-7.el9.tuxcare.els5.x86_64.rpm
    sha:215559377da6ca069e7af53af2a948acf417c8f023f4eb2bad655e0c907587f0
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.