[CLSA-2026:1789131413] tar: Fix of CVE-2026-18508
Type:
security
Severity:
Moderate
Release date:
2026-09-11 12:57:03 UTC
Description:
- CVE-2026-18508: confine hard link targets to the --one-top-level directory, so a crafted archive can no longer alias a file outside it; this also repairs extraction of legitimate hard links under --one-top-level
CVEs fixed:
Updated packages:
  • tar-1.34-7.el9.tuxcare.els5.x86_64.rpm
    sha:caa09fdd9ec3292bd3b8c866b05474cd2c563d574a97e49d4b6da21363251156
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.