openSUSE-SU-2026:21070-1

Details

Description of the patch:

This update for tar fixes the following issues

CVE-2026-5704: crafted archives can be used to to hide file injection (bsc#1261900).
Fix --dereference/-h not working properly after CVE-2025-45582 fix (bsc#1265450).

Affected Packages

tar

openSUSE Leap 16.0

Fixed in:

1.35-160000.4.1

tar-backup-scripts

openSUSE Leap 16.0

Fixed in:

1.35-160000.4.1

tar-doc

openSUSE Leap 16.0

Fixed in:

1.35-160000.4.1

tar-lang

openSUSE Leap 16.0

Fixed in:

1.35-160000.4.1

tar-rmt

openSUSE Leap 16.0

Fixed in:

1.35-160000.4.1

tar-tests

openSUSE Leap 16.0

Fixed in:

1.35-160000.4.1

References