# tar security updates Patch Radar has 30 security fixes for tar, closing 9 CVEs. The newest is RHSA-2026:70390 (2:1.30-13.el8_10), released September 23, 2026. - Web page: https://patchblox.com/security/product/linux/tar - Platform: Linux - Supported: yes ## Security fixes, newest first | Fix | Released | Fixed in | Priority | CVEs | Exploited | |---|---|---|---|---:|---:| | [RHSA-2026:70390](https://patchblox.com/security/data/fix/linux/rhsa-2026-70390.md) | Sep 23, 2026 | RHEL 8 2:1.30-13.el8_10 | Routine | 4 | 0 | | [RHSA-2026:61581](https://patchblox.com/security/data/fix/linux/rhsa-2026-61581.md) | Sep 13, 2026 | RHEL 9 2:1.34-13.el9_8 | Routine | 3 | 0 | | [RHSA-2026:61586](https://patchblox.com/security/data/fix/linux/rhsa-2026-61586.md) | Jul 31, 2026 | RHEL 10 1.35-13.el10_2 | Routine | 3 | 0 | | [tar 1.29b-2ubuntu0.4+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-tar-1.29b-2ubuntu0.4-esm4.md) | Apr 6, 2026 | Ubuntu 18.04.6 LTS (bionic) 1.29b-2ubuntu0.4+esm4 | Routine | 1 | 0 | | [tar 1.30+dfsg-7ubuntu0.20.04.4+esm3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-tar-1.30-dfsg-7ubuntu0.20.04.4-esm3.md) | Apr 6, 2026 | Ubuntu 20.04 LTS (focal) 1.30+dfsg-7ubuntu0.20.04.4+esm3 | Routine | 1 | 0 | | [tar 1.34+dfsg-1ubuntu0.1.22.04.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-tar-1.34-dfsg-1ubuntu0.1.22.04.6.md) | Apr 6, 2026 | Ubuntu 22.04.1 LTS (jammy) 1.34+dfsg-1ubuntu0.1.22.04.6 | Routine | 1 | 0 | | [tar 1.35+dfsg-3ubuntu0.4](https://patchblox.com/security/data/fix/linux/ubuntu-noble-tar-1.35-dfsg-3ubuntu0.4.md) | Apr 6, 2026 | Ubuntu 24.04.5 LTS (noble) 1.35+dfsg-3ubuntu0.4 | Routine | 1 | 0 | | [RHSA-2026:0067](https://patchblox.com/security/data/fix/linux/rhsa-2026-0067.md) | Jan 16, 2026 | RHEL 9 2:1.34-9.el9_7 | Routine | 1 | 0 | | [tar 1.34+dfsg-1ubuntu0.1.22.04.4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-tar-1.34-dfsg-1ubuntu0.1.22.04.4.md) | Jul 11, 2025 | Ubuntu 22.04.1 LTS (jammy) 1.34+dfsg-1ubuntu0.1.22.04.4 | Routine | 1 | 0 | | [tar 1.35+dfsg-3ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-noble-tar-1.35-dfsg-3ubuntu0.2.md) | Jul 11, 2025 | Ubuntu 24.04.5 LTS (noble) 1.35+dfsg-3ubuntu0.2 | Routine | 1 | 0 | | [RHSA-2026:0135](https://patchblox.com/security/data/fix/linux/rhsa-2026-0135.md) | Jul 11, 2025 | RHEL 10 1.35-7.el10_0.2 | Routine | 1 | 0 | | [DEBIAN-CVE-2023-39804](https://patchblox.com/security/data/fix/linux/debian-cve-2023-39804.md) | Mar 27, 2024 | Debian 13.5 (trixie) 1.34+dfsg-1.3 | Routine | 1 | 0 | | [DEBIAN-CVE-2023-39804](https://patchblox.com/security/data/fix/linux/debian-cve-2023-39804.md) | Mar 27, 2024 | Debian 12.15 (bookworm) 1.34+dfsg-1.2+deb12u1 | Routine | 1 | 0 | | [DEBIAN-CVE-2023-39804](https://patchblox.com/security/data/fix/linux/debian-cve-2023-39804.md) | Mar 27, 2024 | Debian 14 1.34+dfsg-1.3 | Routine | 1 | 0 | | [tar 1.29b-2ubuntu0.4+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-tar-1.29b-2ubuntu0.4-esm1.md) | Nov 29, 2023 | Ubuntu 18.04.6 LTS (bionic) 1.29b-2ubuntu0.4+esm1 | Routine | 1 | 0 | | [tar 1.30+dfsg-7ubuntu0.20.04.4](https://patchblox.com/security/data/fix/linux/ubuntu-focal-tar-1.30-dfsg-7ubuntu0.20.04.4.md) | Nov 29, 2023 | Ubuntu 20.04 LTS (focal) 1.30+dfsg-7ubuntu0.20.04.4 | Routine | 1 | 0 | | [tar 1.34+dfsg-1ubuntu0.1.22.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-tar-1.34-dfsg-1ubuntu0.1.22.04.2.md) | Nov 29, 2023 | Ubuntu 22.04.1 LTS (jammy) 1.34+dfsg-1ubuntu0.1.22.04.2 | Routine | 1 | 0 | | [RHSA-2023:0959](https://patchblox.com/security/data/fix/linux/rhsa-2023-0959.md) | Feb 28, 2023 | RHEL 9 2:1.34-6.el9_1 | Routine | 1 | 0 | | [RHSA-2023:0842](https://patchblox.com/security/data/fix/linux/rhsa-2023-0842.md) | Feb 21, 2023 | RHEL 8 2:1.30-6.el8_7.1 | Routine | 1 | 0 | | [DEBIAN-CVE-2022-48303](https://patchblox.com/security/data/fix/linux/debian-cve-2022-48303.md) | Jan 30, 2023 | Debian 12.15 (bookworm) 1.34+dfsg-1.2+deb12u1 | Routine | 1 | 0 | | [DEBIAN-CVE-2022-48303](https://patchblox.com/security/data/fix/linux/debian-cve-2022-48303.md) | Jan 30, 2023 | Debian 13.5 (trixie) 1.34+dfsg-1.4 | Routine | 1 | 0 | | [DEBIAN-CVE-2022-48303](https://patchblox.com/security/data/fix/linux/debian-cve-2022-48303.md) | Jan 30, 2023 | Debian 14 1.34+dfsg-1.4 | Routine | 1 | 0 | | [tar 1.29b-2ubuntu0.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-tar-1.29b-2ubuntu0.4.md) | Jan 29, 2023 | Ubuntu 18.04.6 LTS (bionic) 1.29b-2ubuntu0.4 | Routine | 1 | 0 | | [tar 1.30+dfsg-7ubuntu0.20.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-tar-1.30-dfsg-7ubuntu0.20.04.3.md) | Jan 29, 2023 | Ubuntu 20.04 LTS (focal) 1.30+dfsg-7ubuntu0.20.04.3 | Routine | 1 | 0 | | [tar 1.34+dfsg-1ubuntu0.1.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-tar-1.34-dfsg-1ubuntu0.1.22.04.1.md) | Jan 29, 2023 | Ubuntu 22.04.1 LTS (jammy) 1.34+dfsg-1ubuntu0.1.22.04.1 | Routine | 1 | 0 | | [tar 1.29b-2ubuntu0.3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-tar-1.29b-2ubuntu0.3.md) | Mar 26, 2021 | Ubuntu 18.04.6 LTS (bionic) 1.29b-2ubuntu0.3 | Routine | 1 | 0 | | [tar 1.30+dfsg-7ubuntu0.20.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-tar-1.30-dfsg-7ubuntu0.20.04.2.md) | Mar 26, 2021 | Ubuntu 20.04 LTS (focal) 1.30+dfsg-7ubuntu0.20.04.2 | Routine | 1 | 0 | | [tar 1.34+dfsg-1build1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-tar-1.34-dfsg-1build1.md) | Mar 26, 2021 | Ubuntu 22.04.1 LTS (jammy) 1.34+dfsg-1build1 | Routine | 1 | 0 | | [tar 1.29b-2ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-tar-1.29b-2ubuntu0.2.md) | Mar 22, 2019 | Ubuntu 18.04.6 LTS (bionic) 1.29b-2ubuntu0.2 | Routine | 2 | 0 | | [tar 1.30+dfsg-7ubuntu0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-tar-1.30-dfsg-7ubuntu0.20.04.1.md) | Mar 22, 2019 | Ubuntu 20.04 LTS (focal) 1.30+dfsg-7ubuntu0.20.04.1 | Routine | 1 | 0 | --- Data as of 2026-11-07T00:32:44Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo