CVE-2025-45582
MediumAdvisory
Published 11 Jul 2025In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.6
- base score, highest
- EPSS
- 0.004
- 38th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 978
- of 17,787 indexed, latest versions
- Container images
- 969
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Red Hat Security Advisory: tar security update
Carried by container images the latest versions of 978 of 17,787 indexed charts deploy, on 969 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| tarrpm | 1.34-150000.3.34.1, 1.35-160000.2.2, 2:1.34-6.el9_1, 2:1.34-6.el9_4.1+2 more | 1.34-150000.3.37.1, 1.35-160000.3.1, 2:1.34-9.el9_7, 2:1.35-9.el10_1 | 40 |
| tardeb | 1.27.1-1, 1.27.1-1ubuntu0.1, 1.28-2.1ubuntu0.1, 1.28-2.1ubuntu0.2+19 more | 1.34+dfsg-1ubuntu0.1.22.04.4, 1.35+dfsg-3ubuntu0.2, 1.35+dfsg-4ubuntu0.2 | 929 |
- OSV records
- RHSA-2026:0002RHSA-2026:0067RLSA-2026:0067UBUNTU-CVE-2025-45582SUSE-SU-2026:1177-1SUSE-SU-2026:21143-1
- Also known as
- RHSA-2026:0434, RHSA-2026:0435, USN-8510-1
Charts affected
978 by stars
Container images carrying it
969 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| circleci/ | 9bdc62f02162 | tar | no fix listed | 1 |
| ciscolabs/ | 36d02faad958 | tar | 1.34+dfsg-1ubuntu0.1.22.04.4 | 1 |
| citizenstig/ | b81c818ccb86 | tar | no fix listed | 1 |
| ckan/ | ef8e5d3e6be1 | tar | 1.34+dfsg-1ubuntu0.1.22.04.4 | 1 |
| clickhouse/ | 1ffa82edee00 | tar | no fix listed | 1 |
| clickhouse/ | 2e6587b81a26 | tar | no fix listed | 1 |
| clickhouse/ | 512bb8a21483 | tar | no fix listed | 1 |
| clickhouse/ | 8745843b17f9 | tar | 1.34+dfsg-1ubuntu0.1.22.04.4 | 1 |
| clickhouse/ | 92098d3b31dd | tar | 1.34+dfsg-1ubuntu0.1.22.04.4 | 1 |
| clickhouse/ | a65ca89ddbe8 | tar | 1.34+dfsg-1ubuntu0.1.22.04.4 | 1 |
| clickhouse/ | b627d7a9bc0e | tar | 1.34+dfsg-1ubuntu0.1.22.04.4 | 1 |
| clickhouse/ | dc5658853ce1 | tar | 1.34+dfsg-1ubuntu0.1.22.04.4 | 1 |
| clickhouse/ | e019438e1e05 | tar | 1.34+dfsg-1ubuntu0.1.22.04.4 | 1 |
| cloudve/ | af56e77ca587 | tar | no fix listed | 1 |
| cloudve/ | d79c1c5881c0 | tar | no fix listed | 1 |
| codetogether/ | 4348c8a38752 | tar | 2:1.34-9.el9_7 | 1 |
| consensys/ | bf6ecd2ea716 | tar | 1.35+dfsg-3ubuntu0.2 | 1 |
| cortezaproject/ | 0bcdcbcd3c63 | tar | 1.34+dfsg-1ubuntu0.1.22.04.4 | 1 |
| cortezaproject/ | 8eb7a26605c9 | tar | no fix listed | 1 |
| cortezaproject/ | cb9f200de5d2 | tar | 1.34+dfsg-1ubuntu0.1.22.04.4 | 1 |
| countly/ | e3c238248f99 | tar | no fix listed | 1 |
| cradlepoint/ | 8f5720b0cd03 | tar | no fix listed | 1 |
| cribl/ | 762747cb6796 | tar | no fix listed | 1 |
| csiplugin/ | 1fa83d45417f | tar | no fix listed | 1 |
| daedalusproject/ | 6f72b5119eda | tar | no fix listed | 1 |
| darthsim/ | 3b709e4a0e5e | tar | 1.35+dfsg-3ubuntu0.2 | 1 |
| darthsim/ | 476cb08c816a | tar | 1.35+dfsg-3ubuntu0.2 | 1 |
| darthsim/ | 7d12c7c8fc66 | tar | 1.35+dfsg-3ubuntu0.2 | 1 |
| daskdev/ | 052630f5ca04 | tar | no fix listed | 1 |
| dasmeta/ | fa657960dfec | tar | no fix listed | 1 |
| datadog/ | aad9994de6a7 | tar | 1.35+dfsg-3ubuntu0.2 | 1 |
| datalayers/ | 17b292079239 | tar | 1.34+dfsg-1ubuntu0.1.22.04.4 | 1 |
| datalust/ | 9c731bb207a6 | tar | no fix listed | 1 |
| datalust/ | 3de34aed5642 | tar | no fix listed | 1 |
| datamate/ | 2dd66b722464 | tar | 1.34+dfsg-1ubuntu0.1.22.04.4 | 1 |
| dbeaver/ | 87ab86d00f8c | tar | 1.35+dfsg-3ubuntu0.2 | 1 |
| dblaci/ | eea697611af4 | tar | 1.34+dfsg-1ubuntu0.1.22.04.4 | 1 |
| deepflowce/ | bc1882f75c18 | tar | no fix listed | 1 |
| deepflowce/ | 29332fee7fc2 | tar | 1.34+dfsg-1ubuntu0.1.22.04.4 | 1 |
| dellcloud/ | 02fc234353a9 | tar | no fix listed | 1 |
| dellcloud/ | 4d2eb25b9225 | tar | no fix listed | 1 |
| dgraph/ | b57fa31f9b7f | tar | 1.35+dfsg-3ubuntu0.2 | 1 |
| dgraziotin/ | 38f2de42bed0 | tar | no fix listed | 1 |
| dniel/ | 45a667852f2a | tar | no fix listed | 1 |
| dongjiang1989/ | 4bf9ae391948 | tar | no fix listed | 1 |
| dremio/ | 80ed2e3b7c43 | tar | 1.34+dfsg-1ubuntu0.1.22.04.4 | 1 |
| drpcorg/ | 8858fae1859d | tar | 1.34+dfsg-1ubuntu0.1.22.04.4 | 1 |
| duck1123/ | 0e29f19fa67c | tar | 1.34+dfsg-1ubuntu0.1.22.04.4 | 1 |
| duck1123/ | 9d6fb247b714 | tar | 1.34+dfsg-1ubuntu0.1.22.04.4 | 1 |
| dzikoysk/ | 4128c2d7a6ba | tar | 1.35+dfsg-3ubuntu0.2 | 1 |