topic Re: CVE-2025-45582 - tar: Tar path traversal in General Topics

CVE-2025-45582 - tar: Tar path traversal

Blason_R — Mon, 18 Aug 2025 06:33:05 GMT

Hi Team,

According to GitHub, a recent vulnerability (CVE-2025-45582) has been reported, classified as medium severity. Although the impact is not severe on its own.

As vulnerability scanners begin to detect this issue, it's likely that our systems will be flagged soon. To mitigate potential disruptions, I recommend checking with Checkpoint's support team to determine if they plan to release any patches or updates for this vulnerability in the near future.

https://www.cve.org/CVERecord?id=CVE-2025-45582

https://github.com/i900008/vulndb/blob/main/Gnu_tar_vuln.md

https://lists.gnu.org/archive/html/bug-tar/2025-08/msg00012.html

Re: CVE-2025-45582 - tar: Tar path traversal

Chris_Atkinson — Mon, 18 Aug 2025 10:39:27 GMT

Note if not already you can subscribe to updates regarding IPS protections here:

https://advisories.checkpoint.com/defense/advisories/public/sdnews/

Re: CVE-2025-45582 - tar: Tar path traversal

PhoneBoy — Mon, 18 Aug 2025 15:36:46 GMT

It seems like this would require explicit actions by a trusted administrative user using maliciously crafted files to exploit.
Not to say this won't get fixed, but it's likely going to be done as part of the normal JHF process.
For a formal response, contact TAC.