gpp_maybe Security update for tar

SUSE-SLE-Module-Basesystem-15-SP7-2026-2714

This update for tar fixes the following issues Security fixes: - CVE-2026-5704: crafted archives can be used to to hide file injection (bsc#1261900). Other fixes: - Fix tar changing dir permissions temporarily even when using --no-overwrite-dir. - Fix --dereference/-h not working properly after CVE-2025-45582 fix (bsc#1265450). - Fix extraction failure for paths like "a/./b" caused by the gnulib openat2 implementation (bsc#1267189).

• Release Date
  Jun 30 2026
• References
  Bugzilla: 1261900, 1265450, 1267189
  CVEs: CVE-2026-5704
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.7 aarch64

• Packages
  tar
  GNU implementation of ((t)ape (ar)chiver)

  1.34-150000.3.42.1 lock rpm lock src

  tar-lang
  Translations for package tar

  1.34-150000.3.42.1 lock rpm

  tar-rmt
  Remote tape drive control server by GNU

  1.34-150000.3.42.1 lock rpm

Basesystem Module 15.7 s390x

• Packages
  tar
  GNU implementation of ((t)ape (ar)chiver)

  1.34-150000.3.42.1 lock rpm lock src

  tar-lang
  Translations for package tar

  1.34-150000.3.42.1 lock rpm

  tar-rmt
  Remote tape drive control server by GNU

  1.34-150000.3.42.1 lock rpm

Basesystem Module 15.7 ppc64le

• Packages
  tar
  GNU implementation of ((t)ape (ar)chiver)

  1.34-150000.3.42.1 lock rpm lock src

  tar-lang
  Translations for package tar

  1.34-150000.3.42.1 lock rpm

  tar-rmt
  Remote tape drive control server by GNU

  1.34-150000.3.42.1 lock rpm

Basesystem Module 15.7 x86_64

• Packages
  tar
  GNU implementation of ((t)ape (ar)chiver)

  1.34-150000.3.42.1 lock rpm lock src

  tar-lang
  Translations for package tar

  1.34-150000.3.42.1 lock rpm

  tar-rmt
  Remote tape drive control server by GNU

  1.34-150000.3.42.1 lock rpm