CLSA-2026-1791452899

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791452899.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1791452899
Upstream
  • CVE-2026-5704
Published
2026-10-08T09:48:33Z
Modified
2026-10-26T09:30:53Z
Summary
tar: Fix of CVE-2026-5704
Details
  • CVE-2026-5704: make listing and extraction skip archive members the same way, so a crafted archive can no longer inject a file hidden from tar -t
References

Affected packages

TuxCare:AlmaLinux:9.2 / tar

Package

Name
tar
Purl
pkg:rpm/tuxcare/tar?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2:1.34-7.el9.tuxcare.els6

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1791452899.json"