CLSA-2026-1787335320
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1787335320.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1787335320
- Upstream
- CVE-2026-18477
- Published
- 2026-08-21T18:02:10Z
- Modified
- 2026-10-26T09:31:30Z
- Summary
- tar: Fix of CVE-2026-18477
- Details
-
- CVE-2026-18477: apply safer_name_suffix to incremental dumpdir 'X' entries so the temporary directory template can no longer escape the extraction directory
- use mkdtempat instead of mkdtemp so the 'X' temporary directory is created relative to -C (backport of upstream d479b2cc)
- References