Back Linuxsecurity openSUSE: 2026:21070-1 : tar
- CVE-2026-5704: crafted archives can be used to to hide file injection (bsc#1261900).
- Fix --dereference/-h not working properly after CVE-2025-45582 fix (bsc#1265450).
To install this openSUSE security update use the suse recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
zypper in -t patch openSUSE-Leap-16.0-1092=1
tar-backup-scripts-1.35-160000.4.1
tar-doc-1.35-160000.4.1
tar-lang-1.35-160000.4.1
tar-rmt-1.35-160000.4.1
tar-tests-1.35-160000.4.1
*
*
Get the latest Linux and open source security news straight to your inbox.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
