Release date:
2026-10-08 09:04:59 UTC
Description:
- CVE-2026-5704: make listing and extraction skip archive members the same
way, so a crafted archive can no longer inject a file hidden from tar -t
Updated packages:
-
tar-1.34-7.el9.tuxcare.els6.aarch64.rpm
sha:874bd53c617dd3d28cba819f79686595fc91d78942fab50790fa80fdf2234c6b
-
tar-1.34-7.el9.tuxcare.els6.i686.rpm
sha:30a47817968cb92bf78e7804168a12a1a17303b8b0cdf927538cabf1d00e5be0
-
tar-1.34-7.el9.tuxcare.els6.x86_64.rpm
sha:7d2d17644f68719091203111c2ca803ca4da885b0833de7188b2061fd4d9075c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.