SUSE-SU-2026:21143-1

Security update for tar

view advisory published 2026-04-07

Security update for tar

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-45582US	—	0.49% (42nd)	—	2025-07-11
GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with a certain two-step process. First, the victim must extract an archive that contains…

references

External citations — patches, advisories, analysis.

SUSE Bug 1246399self
SUSE Bug 1246607self
URL of this CSAF noticeself
E-Mail link for SUSE-SU-2026:21143-1self
SUSE CVE CVE-2025-45582 pageself
SUSE ratingsexternal
URL for SUSE-SU-2026:21143-1self

remediations (22)

Fixedtar-0:1.35-160000.3.1.aarch64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtar-0:1.35-160000.3.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtar-0:1.35-160000.3.1.ppc64le as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtar-0:1.35-160000.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtar-0:1.35-160000.3.1.s390x as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtar-0:1.35-160000.3.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtar-0:1.35-160000.3.1.x86_64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtar-0:1.35-160000.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtar-backup-scripts-0:1.35-160000.3.1.noarch as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtar-backup-scripts-0:1.35-160000.3.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtar-doc-0:1.35-160000.3.1.noarch as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtar-doc-0:1.35-160000.3.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtar-lang-0:1.35-160000.3.1.noarch as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtar-lang-0:1.35-160000.3.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtar-rmt-0:1.35-160000.3.1.aarch64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtar-rmt-0:1.35-160000.3.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtar-rmt-0:1.35-160000.3.1.ppc64le as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtar-rmt-0:1.35-160000.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtar-rmt-0:1.35-160000.3.1.s390x as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtar-rmt-0:1.35-160000.3.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtar-rmt-0:1.35-160000.3.1.x86_64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtar-rmt-0:1.35-160000.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan