[Apollo] Advisories Statistics light light Login

RLSA-2026:61581

Security Mirrored from RHSA-2026:61581
Issued at: 2026-09-01
Updated at: 2026-09-02

Advisory content derived from Red Hat RHSA-2026:61581, © Red Hat, Inc., used under CC BY 4.0, with modifications.

Synopsis

Moderate: tar security, bug fix, and enhancement update



Description

The GNU tar program can save multiple files in an archive and restore files from an archive.

Security Fix(es):

* tar: tar: Hidden file injection via crafted archives (CVE-2026-5704)

* tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape (CVE-2026-18477)

* tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite (CVE-2026-18508)

Bug Fix(es) and Enhancement(s):

* tar: --one-top-level with absolute path fails [rhel-9] (JIRA:Rocky Linux-144021)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.



Affected products

Rocky Linux 9 aarch64 Rocky Linux 9 ppc64le Rocky Linux 9 s390x Rocky Linux 9 x86_64

Fixes

2455360 2509735 2509843

CVEs

CVE-2026-18477 CVE-2026-18508 CVE-2026-5704

Affected packages

Rocky Linux 9 aarch64 - BaseOS

tar-2:1.34-13.el9_8.aarch64.rpm tar-2:1.34-13.el9_8.src.rpm tar-debuginfo-2:1.34-13.el9_8.aarch64.rpm tar-debugsource-2:1.34-13.el9_8.aarch64.rpm

Rocky Linux 9 ppc64le - BaseOS

tar-2:1.34-13.el9_8.ppc64le.rpm tar-2:1.34-13.el9_8.src.rpm tar-debuginfo-2:1.34-13.el9_8.ppc64le.rpm tar-debugsource-2:1.34-13.el9_8.ppc64le.rpm

Rocky Linux 9 s390x - BaseOS

tar-2:1.34-13.el9_8.s390x.rpm tar-2:1.34-13.el9_8.src.rpm tar-debuginfo-2:1.34-13.el9_8.s390x.rpm tar-debugsource-2:1.34-13.el9_8.s390x.rpm

Rocky Linux 9 x86_64 - BaseOS

tar-2:1.34-13.el9_8.src.rpm tar-2:1.34-13.el9_8.x86_64.rpm tar-debuginfo-2:1.34-13.el9_8.x86_64.rpm tar-debugsource-2:1.34-13.el9_8.x86_64.rpm