CVE-2025-45582 - tar: Tar path traversal

[Blason_R]

Hi Team,

According to GitHub, a recent vulnerability (CVE-2025-45582) has been reported, classified as medium severity. Although the impact is not severe on its own.

As vulnerability scanners begin to detect this issue, it's likely that our systems will be flagged soon. To mitigate potential disruptions, I recommend checking with Checkpoint's support team to determine if they plan to release any patches or updates for this vulnerability in the near future.

https://www.cve.org/CVERecord?id=CVE-2025-45582

https://github.com/i900008/vulndb/blob/main/Gnu_tar_vuln.md

https://lists.gnu.org/archive/html/bug-tar/2025-08/msg00012.html

[Chris_Atkinson]

Note if not already you can subscribe to updates regarding IPS protections here:

https://advisories.checkpoint.com/defense/advisories/public/sdnews/

[PhoneBoy]

It seems like this would require explicit actions by a trusted administrative user using maliciously crafted files to exploit.
Not to say this won't get fixed, but it's likely going to be done as part of the normal JHF process.
For a formal response, contact TAC.