红帽产品勘误 RHSA-2026:0067 - Security Advisory
发布：
2026-01-05
已更新：
2026-01-05

RHSA-2026:0067 - Security Advisory

概述

Moderate: tar security update

类型/严重性

Security Advisory: Moderate

Red Hat Insights 补丁分析

识别并修复受此公告影响的系统。

查看受影响的系统

标题

An update for tar is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

描述

The GNU tar program can save multiple files in an archive and restore files from an archive.

Security Fix(es):

  • tar: Tar path traversal (CVE-2025-45582)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

解决方案

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

受影响的产品

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x

修复

Red Hat Enterprise Linux for x86_64 9

SRPM
tar-1.34-9.el9_7.src.rpm SHA-256: 9b84935c6072500fa28674521fe13816a8be44c50bb8eaf5ec73994782161250
x86_64
tar-1.34-9.el9_7.x86_64.rpm SHA-256: 4c0beb933074a5254c297e8968b3f41ec5a02b23056997ddcf526fe7e6166482
tar-debuginfo-1.34-9.el9_7.x86_64.rpm SHA-256: 9c50d2ff38722e54f5df2d6156300712439448bdfedb4f73b9852d76d22b9dad
tar-debugsource-1.34-9.el9_7.x86_64.rpm SHA-256: df7ef9b0a0d6808ca57eede9d76a668ef530ac25b149c7e27d617dbaf67f6f8b

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8

SRPM
tar-1.34-9.el9_7.src.rpm SHA-256: 9b84935c6072500fa28674521fe13816a8be44c50bb8eaf5ec73994782161250
x86_64
tar-1.34-9.el9_7.x86_64.rpm SHA-256: 4c0beb933074a5254c297e8968b3f41ec5a02b23056997ddcf526fe7e6166482
tar-debuginfo-1.34-9.el9_7.x86_64.rpm SHA-256: 9c50d2ff38722e54f5df2d6156300712439448bdfedb4f73b9852d76d22b9dad
tar-debugsource-1.34-9.el9_7.x86_64.rpm SHA-256: df7ef9b0a0d6808ca57eede9d76a668ef530ac25b149c7e27d617dbaf67f6f8b

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
tar-1.34-9.el9_7.src.rpm SHA-256: 9b84935c6072500fa28674521fe13816a8be44c50bb8eaf5ec73994782161250
s390x
tar-1.34-9.el9_7.s390x.rpm SHA-256: ae335ed3e594cdb4123c6732c5dd9d4250050e96117e2593b31f8c4ee4ee2b8f
tar-debuginfo-1.34-9.el9_7.s390x.rpm SHA-256: 7d11da02e181c0990294f53f09487cdbb5c33ff91430784cd0213a8ae6900c29
tar-debugsource-1.34-9.el9_7.s390x.rpm SHA-256: 30abed5853d4e1fa6f1d4b23196503055185f33f36035971adb5cb3ae04846bd

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8

SRPM
tar-1.34-9.el9_7.src.rpm SHA-256: 9b84935c6072500fa28674521fe13816a8be44c50bb8eaf5ec73994782161250
s390x
tar-1.34-9.el9_7.s390x.rpm SHA-256: ae335ed3e594cdb4123c6732c5dd9d4250050e96117e2593b31f8c4ee4ee2b8f
tar-debuginfo-1.34-9.el9_7.s390x.rpm SHA-256: 7d11da02e181c0990294f53f09487cdbb5c33ff91430784cd0213a8ae6900c29
tar-debugsource-1.34-9.el9_7.s390x.rpm SHA-256: 30abed5853d4e1fa6f1d4b23196503055185f33f36035971adb5cb3ae04846bd

Red Hat Enterprise Linux for Power, little endian 9

SRPM
tar-1.34-9.el9_7.src.rpm SHA-256: 9b84935c6072500fa28674521fe13816a8be44c50bb8eaf5ec73994782161250
ppc64le
tar-1.34-9.el9_7.ppc64le.rpm SHA-256: 6b32b0c5b960f836c91fae329c0d2786d932a44b9e44711639646b5e55146c8b
tar-debuginfo-1.34-9.el9_7.ppc64le.rpm SHA-256: 38f09725df368463e269580b6bc60ebfe716a031b3cfaa353f5c0ecf7a863a19
tar-debugsource-1.34-9.el9_7.ppc64le.rpm SHA-256: abd0ede9cd86d8cfff35e7a811900368706e300a800cb9b918f1b9c2f2a1dd04

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8

SRPM
tar-1.34-9.el9_7.src.rpm SHA-256: 9b84935c6072500fa28674521fe13816a8be44c50bb8eaf5ec73994782161250
ppc64le
tar-1.34-9.el9_7.ppc64le.rpm SHA-256: 6b32b0c5b960f836c91fae329c0d2786d932a44b9e44711639646b5e55146c8b
tar-debuginfo-1.34-9.el9_7.ppc64le.rpm SHA-256: 38f09725df368463e269580b6bc60ebfe716a031b3cfaa353f5c0ecf7a863a19
tar-debugsource-1.34-9.el9_7.ppc64le.rpm SHA-256: abd0ede9cd86d8cfff35e7a811900368706e300a800cb9b918f1b9c2f2a1dd04

Red Hat Enterprise Linux for ARM 64 9

SRPM
tar-1.34-9.el9_7.src.rpm SHA-256: 9b84935c6072500fa28674521fe13816a8be44c50bb8eaf5ec73994782161250
aarch64
tar-1.34-9.el9_7.aarch64.rpm SHA-256: 2d0bd44116c3f5c229d25fdc6458f6ce24a7ad4fdb463767eea48dcab78c5062
tar-debuginfo-1.34-9.el9_7.aarch64.rpm SHA-256: 906dfe6fc1fcfcb29195d3533c3345d238de78d48a11dbcb6c28d7255235a9de
tar-debugsource-1.34-9.el9_7.aarch64.rpm SHA-256: dd309ed84b46511bc20c25a5f0b5ff8a80840fcb1a872734b8689a1b0ba019d7

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8

SRPM
tar-1.34-9.el9_7.src.rpm SHA-256: 9b84935c6072500fa28674521fe13816a8be44c50bb8eaf5ec73994782161250
aarch64
tar-1.34-9.el9_7.aarch64.rpm SHA-256: 2d0bd44116c3f5c229d25fdc6458f6ce24a7ad4fdb463767eea48dcab78c5062
tar-debuginfo-1.34-9.el9_7.aarch64.rpm SHA-256: 906dfe6fc1fcfcb29195d3533c3345d238de78d48a11dbcb6c28d7255235a9de
tar-debugsource-1.34-9.el9_7.aarch64.rpm SHA-256: dd309ed84b46511bc20c25a5f0b5ff8a80840fcb1a872734b8689a1b0ba019d7

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8

SRPM
tar-1.34-9.el9_7.src.rpm SHA-256: 9b84935c6072500fa28674521fe13816a8be44c50bb8eaf5ec73994782161250
ppc64le
tar-1.34-9.el9_7.ppc64le.rpm SHA-256: 6b32b0c5b960f836c91fae329c0d2786d932a44b9e44711639646b5e55146c8b
tar-debuginfo-1.34-9.el9_7.ppc64le.rpm SHA-256: 38f09725df368463e269580b6bc60ebfe716a031b3cfaa353f5c0ecf7a863a19
tar-debugsource-1.34-9.el9_7.ppc64le.rpm SHA-256: abd0ede9cd86d8cfff35e7a811900368706e300a800cb9b918f1b9c2f2a1dd04

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8

SRPM
tar-1.34-9.el9_7.src.rpm SHA-256: 9b84935c6072500fa28674521fe13816a8be44c50bb8eaf5ec73994782161250
x86_64
tar-1.34-9.el9_7.x86_64.rpm SHA-256: 4c0beb933074a5254c297e8968b3f41ec5a02b23056997ddcf526fe7e6166482
tar-debuginfo-1.34-9.el9_7.x86_64.rpm SHA-256: 9c50d2ff38722e54f5df2d6156300712439448bdfedb4f73b9852d76d22b9dad
tar-debugsource-1.34-9.el9_7.x86_64.rpm SHA-256: df7ef9b0a0d6808ca57eede9d76a668ef530ac25b149c7e27d617dbaf67f6f8b

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8

SRPM
tar-1.34-9.el9_7.src.rpm SHA-256: 9b84935c6072500fa28674521fe13816a8be44c50bb8eaf5ec73994782161250
aarch64
tar-1.34-9.el9_7.aarch64.rpm SHA-256: 2d0bd44116c3f5c229d25fdc6458f6ce24a7ad4fdb463767eea48dcab78c5062
tar-debuginfo-1.34-9.el9_7.aarch64.rpm SHA-256: 906dfe6fc1fcfcb29195d3533c3345d238de78d48a11dbcb6c28d7255235a9de
tar-debugsource-1.34-9.el9_7.aarch64.rpm SHA-256: dd309ed84b46511bc20c25a5f0b5ff8a80840fcb1a872734b8689a1b0ba019d7

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8

SRPM
tar-1.34-9.el9_7.src.rpm SHA-256: 9b84935c6072500fa28674521fe13816a8be44c50bb8eaf5ec73994782161250
s390x
tar-1.34-9.el9_7.s390x.rpm SHA-256: ae335ed3e594cdb4123c6732c5dd9d4250050e96117e2593b31f8c4ee4ee2b8f
tar-debuginfo-1.34-9.el9_7.s390x.rpm SHA-256: 7d11da02e181c0990294f53f09487cdbb5c33ff91430784cd0213a8ae6900c29
tar-debugsource-1.34-9.el9_7.s390x.rpm SHA-256: 30abed5853d4e1fa6f1d4b23196503055185f33f36035971adb5cb3ae04846bd

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8

SRPM
tar-1.34-9.el9_7.src.rpm SHA-256: 9b84935c6072500fa28674521fe13816a8be44c50bb8eaf5ec73994782161250
x86_64
tar-1.34-9.el9_7.x86_64.rpm SHA-256: 4c0beb933074a5254c297e8968b3f41ec5a02b23056997ddcf526fe7e6166482
tar-debuginfo-1.34-9.el9_7.x86_64.rpm SHA-256: 9c50d2ff38722e54f5df2d6156300712439448bdfedb4f73b9852d76d22b9dad
tar-debugsource-1.34-9.el9_7.x86_64.rpm SHA-256: df7ef9b0a0d6808ca57eede9d76a668ef530ac25b149c7e27d617dbaf67f6f8b

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8

SRPM
tar-1.34-9.el9_7.src.rpm SHA-256: 9b84935c6072500fa28674521fe13816a8be44c50bb8eaf5ec73994782161250
aarch64
tar-1.34-9.el9_7.aarch64.rpm SHA-256: 2d0bd44116c3f5c229d25fdc6458f6ce24a7ad4fdb463767eea48dcab78c5062
tar-debuginfo-1.34-9.el9_7.aarch64.rpm SHA-256: 906dfe6fc1fcfcb29195d3533c3345d238de78d48a11dbcb6c28d7255235a9de
tar-debugsource-1.34-9.el9_7.aarch64.rpm SHA-256: dd309ed84b46511bc20c25a5f0b5ff8a80840fcb1a872734b8689a1b0ba019d7

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8

SRPM
tar-1.34-9.el9_7.src.rpm SHA-256: 9b84935c6072500fa28674521fe13816a8be44c50bb8eaf5ec73994782161250
ppc64le
tar-1.34-9.el9_7.ppc64le.rpm SHA-256: 6b32b0c5b960f836c91fae329c0d2786d932a44b9e44711639646b5e55146c8b
tar-debuginfo-1.34-9.el9_7.ppc64le.rpm SHA-256: 38f09725df368463e269580b6bc60ebfe716a031b3cfaa353f5c0ecf7a863a19
tar-debugsource-1.34-9.el9_7.ppc64le.rpm SHA-256: abd0ede9cd86d8cfff35e7a811900368706e300a800cb9b918f1b9c2f2a1dd04

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8

SRPM
tar-1.34-9.el9_7.src.rpm SHA-256: 9b84935c6072500fa28674521fe13816a8be44c50bb8eaf5ec73994782161250
s390x
tar-1.34-9.el9_7.s390x.rpm SHA-256: ae335ed3e594cdb4123c6732c5dd9d4250050e96117e2593b31f8c4ee4ee2b8f
tar-debuginfo-1.34-9.el9_7.s390x.rpm SHA-256: 7d11da02e181c0990294f53f09487cdbb5c33ff91430784cd0213a8ae6900c29
tar-debugsource-1.34-9.el9_7.s390x.rpm SHA-256: 30abed5853d4e1fa6f1d4b23196503055185f33f36035971adb5cb3ae04846bd

Red Hat 安全团队联络方式为 secalert@redhat.com。 更多联络细节请参考 https://access.redhat.com/security/team/contact/。