Hi,

The following vulnerability was published for sos.

CVE-2026-79655[0]:
| A flaw was found in sos clean, a utility within the sos package.
| This vulnerability allows a local attacker to perform arbitrary file
| creation or overwrite. By crafting a malicious tar archive, an
| attacker can exploit a path traversal issue during tar extraction,
| where symlink and hardlink targets are not properly validated. This
| enables the attacker to write files to arbitrary locations on the
| system with the privileges of the sos clean process, which often
| runs as root.


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2026-79655
https://www.cve.org/CVERecord?id=CVE-2026-79655
[1] https://github.com/sosreport/sos/issues/4460
[2] https://github.com/sosreport/sos/pull/4461

Please adjust the affected versions in the BTS as needed.

Regards
Salvatore