Red Hat Product Errata RHSA-2026:0002 - Security Advisory
Issued:
2026-01-05
Updated:
2026-01-05

RHSA-2026:0002 - Security Advisory

Synopsis

Moderate: tar security update

Type/Severity

Security Advisory: Moderate

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for tar is now available for Red Hat Enterprise Linux 10.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The GNU tar program can save multiple files in an archive and restore files from an archive.

Security Fix(es):

  • tar: Tar path traversal (CVE-2025-45582)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 10 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 10 s390x
  • Red Hat Enterprise Linux for Power, little endian 10 ppc64le
  • Red Hat Enterprise Linux for ARM 64 10 aarch64

Fixes

Red Hat Enterprise Linux for x86_64 10

SRPM
tar-1.35-9.el10_1.src.rpm SHA-256: 4f74da9337a1158add0221fe3353efcc711b98c04fd4c58df613a1999c010b2e
x86_64
tar-1.35-9.el10_1.x86_64.rpm SHA-256: 5baf4aceabe3b95bf74f4a7b206f2bc5b7f5a8f526fd7e5020edbf49646941a6
tar-debuginfo-1.35-9.el10_1.x86_64.rpm SHA-256: d7a00cad8600fb5352b0361e50d77e0125128e97a269a070667f6de84d2f07dd
tar-debugsource-1.35-9.el10_1.x86_64.rpm SHA-256: 970b995e77bc05540b7c0397d9f56ddef9ca3023c3392f3d3ddbc55b6873cd82

Red Hat Enterprise Linux for IBM z Systems 10

SRPM
tar-1.35-9.el10_1.src.rpm SHA-256: 4f74da9337a1158add0221fe3353efcc711b98c04fd4c58df613a1999c010b2e
s390x
tar-1.35-9.el10_1.s390x.rpm SHA-256: 233cf8ef40eab1f23853d7a9b452750b854ef191cac130605087b3b30063478d
tar-debuginfo-1.35-9.el10_1.s390x.rpm SHA-256: 09788d1c915a314faefd447e935fbed746f9bab77e5010bfbaa449676c1b7c6f
tar-debugsource-1.35-9.el10_1.s390x.rpm SHA-256: a22b3ee93948749d84fcaa48dfc309c36ea0b677b5e337b4b4751eea837594ca

Red Hat Enterprise Linux for Power, little endian 10

SRPM
tar-1.35-9.el10_1.src.rpm SHA-256: 4f74da9337a1158add0221fe3353efcc711b98c04fd4c58df613a1999c010b2e
ppc64le
tar-1.35-9.el10_1.ppc64le.rpm SHA-256: 58a23a9bf48df3e6e3368e55ddea28a6e282345d52e020410a98e09eac12eea3
tar-debuginfo-1.35-9.el10_1.ppc64le.rpm SHA-256: 370ee4f86a33465f61f59923f380482aa8c7691297eeabacd21bc77a025e9d68
tar-debugsource-1.35-9.el10_1.ppc64le.rpm SHA-256: 94f25aa0b0df200e375d3914ab543046a48ba3e489cc103f738abfdc2d69affd

Red Hat Enterprise Linux for ARM 64 10

SRPM
tar-1.35-9.el10_1.src.rpm SHA-256: 4f74da9337a1158add0221fe3353efcc711b98c04fd4c58df613a1999c010b2e
aarch64
tar-1.35-9.el10_1.aarch64.rpm SHA-256: ae24df4cf1c3cfc18c7777fdf75537c59675f0c7b0ea7339b7ad8f00c0a2ac6d
tar-debuginfo-1.35-9.el10_1.aarch64.rpm SHA-256: 70a0edb6ed5d71f7cd9f0e040d3de0920671b5f4cbed03d4016c5f5d77f8e8e5
tar-debugsource-1.35-9.el10_1.aarch64.rpm SHA-256: 1213e3744672137740e400ddb574e2743e5cb974ce67d003e4bb5e2df26f21e8

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.