Multiple security vulnerabilities have been identified in the GNU tar program used in Red Hat Enterprise Linux 10. These include hidden file injection via crafted archives, a time-of-check to time-of-use (TOCTOU) race condition allowing path escape during incremental restore, and arbitrary file overwrite through hardlink targets not confined to the top-level directory. Red Hat has released an update addressing these issues along with bug fixes and enhancements.