Fedora Account System
Red Hat Associate
Red Hat Customer
Caused by the fix for bz2380007 (CVE-2025-45582) Reproducible: Always Steps to Reproduce: #!/bin/bash set -x WORKDIR=$(mktemp -d) trap "rm -rf $WORKDIR /tmp/tar-one-top-level-test" EXIT cd "$WORKDIR" # Create minimal test archive mkdir -p pkg/usr/lib && echo "test" > pkg/usr/lib/tartest.txt tar czf test.tar.gz -C pkg . && rm -rf pkg echo "tar version: $(rpm -q tar 2>/dev/null || tar --version)" tar zxf test.tar.gz --one-top-level=/tmp/tar-one-top-level-test 2>&1 Actual Results: Cannot mkdir/Cannot open: Invalid cross-device link Expected Results: archive is extracted at /tmp/tar-one-top-level-test
This bug appears to have been reported against 'rawhide' during the Fedora Linux 45 development cycle. Changing version to 45.
FEDORA-2026-ee1eb89e7b (tar-1.35-10.fc45) has been submitted as an update to Fedora 45. https://bodhi.fedoraproject.org/updates/FEDORA-2026-ee1eb89e7b
FEDORA-2026-ee1eb89e7b has been pushed to the Fedora 45 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-ee1eb89e7b` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-ee1eb89e7b See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-2026-ee1eb89e7b (tar-1.35-10.fc45) has been pushed to the Fedora 45 stable repository. If problem still persists, please make note of it in this bug report.