AlmaLinux has released a new security update for AlmaLinux 10, which includes a fix for a moderate-level vulnerability. The vulnerability affects the GNU tar program and allows for path traversal (CVE-2025-45582).

ALSA-2026:0002: tar security update (Moderate)

ALSA-2026:0002: tar security update (Moderate)

Hi,

You are receiving an AlmaLinux Security update email because you subscribed to receive errata notifications from AlmaLinux.

AlmaLinux: 10
Type: Security
Severity: Moderate
Release date: 2026-01-05

Summary:

The GNU tar program can save multiple files in an archive and restore files from an archive.

Security Fix(es):

* tar: Tar path traversal (CVE-2025-45582)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Full details, updated packages, references, and other related information: https://errata.almalinux.org/10/ALSA-2026-0002.html

This message is automatically generated, please don’t reply. For further questions, please, contact us via the AlmaLinux community chat: https://chat.almalinux.org/.
Want to change your notification settings? Sign in and manage mailing lists on https://lists.almalinux.org.

Kind regards,
AlmaLinux Team