OESA-2026-1091 tar security update

🗓️ 16 Jan 2026 11:59:08Reported by GoogleType

osv🔗 osv.dev👁 3 Views

GNU Tar 1.35 fixes two-step directory traversal that enables file overwrite via symlinks (CVE-2025-45582).

Reporter	Title	Published	Views	Family All 95
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images	9 Feb 202611:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Operator package issues	27 Feb 202615:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues	17 Dec 202514:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge	6 Jan 202606:04	–	ibm
Tenable Nessus	AlmaLinux 10 : tar (ALSA-2026:0002)	5 Jan 202600:00	–	nessus
Tenable Nessus	AlmaLinux 9 : tar (ALSA-2026:0067)	13 Jan 202600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP13 : tar (EulerOS-SA-2026-1263)	10 Mar 202600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP13 : tar (EulerOS-SA-2026-1299)	10 Mar 202600:00	–	nessus
Tenable Nessus	Fedora 44 : tar (2026-0895af5ebe)	24 Jan 202600:00	–	nessus
Tenable Nessus	MiracleLinux 9 : tar-1.34-9.el9_7 (AXSA:2026-007:01)	13 Jan 202600:00	–	nessus

Source	Link
openeuler	www.openeuler.org/zh/security/security-bulletins/detail/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-45582

16 Jan 2026 12:30Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.14.1

EPSS0.0013

SSVC