A new update has been released for AlmaLinux 9. The update, ALSA-2026:0067, addresses a moderate security issue with the GNU tar program. The security fix is related to a Tar path traversal vulnerability (CVE-2025-45582), and more information can be found on the CVE page listed in the References section.

ALSA-2026:0067: tar security update (Moderate)

ALSA-2026:0067: tar security update (Moderate)

Hi,

You are receiving an AlmaLinux Security update email because you subscribed to receive errata notifications from AlmaLinux.

AlmaLinux: 9
Type: Security
Severity: Moderate
Release date: 2026-01-13

Summary:

The GNU tar program can save multiple files in an archive and restore files from an archive.

Security Fix(es):

* tar: Tar path traversal (CVE-2025-45582)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Full details, updated packages, references, and other related information: https://errata.almalinux.org/9/ALSA-2026-0067.html

This message is automatically generated, please don’t reply. For further questions, please, contact us via the AlmaLinux community chat: https://chat.almalinux.org/.
Want to change your notification settings? Sign in and manage mailing lists on https://lists.almalinux.org.

Kind regards,
AlmaLinux Team