Release date:
2026-10-08 09:48:33 UTC
Description:
- CVE-2026-5704: make listing and extraction skip archive members the same
way, so a crafted archive can no longer inject a file hidden from tar -t
Updated packages:
-
tar-1.34-7.el9.tuxcare.els6.aarch64.rpm
sha:e96524bd993cf1f6d148a0cefb0fb6ae5d384bba0c4d975714358cfa8c937859
-
tar-1.34-7.el9.tuxcare.els6.i686.rpm
sha:b357a95366c064b07baf93d490dcd5f360acc5ec8f9871cd57e9ce47cc9eb211
-
tar-1.34-7.el9.tuxcare.els6.x86_64.rpm
sha:e819ecfbcacc4ac02b11a0e70cc36f1e19f5e8606a3e70b7aa89dd17a67cb172
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
