gpp_maybe Security update for tar

SUSE-SLE-Micro-5.4-2026-2714

This update for tar fixes the following issues Security fixes: - CVE-2026-5704: crafted archives can be used to to hide file injection (bsc#1261900). Other fixes: - Fix tar changing dir permissions temporarily even when using --no-overwrite-dir. - Fix --dereference/-h not working properly after CVE-2025-45582 fix (bsc#1265450). - Fix extraction failure for paths like "a/./b" caused by the gnulib openat2 implementation (bsc#1267189).

• Release Date
  Jun 30 2026
• References
  Bugzilla: 1261900, 1265450, 1267189
  CVEs: CVE-2026-5704
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Micro 5.4 x86_64

• Packages
  tar
  GNU implementation of ((t)ape (ar)chiver)

  1.34-150000.3.42.1 lock rpm lock src

SUSE Linux Enterprise Micro 5.4 aarch64

• Packages
  tar
  GNU implementation of ((t)ape (ar)chiver)

  1.34-150000.3.42.1 lock rpm lock src

SUSE Linux Enterprise Micro 5.4 s390x

• Packages
  tar
  GNU implementation of ((t)ape (ar)chiver)

  1.34-150000.3.42.1 lock rpm lock src