diff --git a/cabal-install/bootstrap.sh b/cabal-install/bootstrap.sh
index 1ea09981931..bd6454236dc 100755
--- a/cabal-install/bootstrap.sh
+++ b/cabal-install/bootstrap.sh
@@ -221,8 +221,8 @@ ED25519_VER="0.0.5.0"; ED25519_VER_REGEXP="0\.0\.?"
                        # 0.0.*
 HACKAGE_SECURITY_VER="0.5.1.0"; HACKAGE_SECURITY_VER_REGEXP="0\.5\.[1-9]"
                        # >= 0.5.1 && < 0.6
-TAR_VER="0.5.0.1";     TAR_VER_REGEXP="0\.5\.([1-9]|1[0-9]|0\.1)\.?"
-                       # >= 0.5.0.1  && < 0.6
+TAR_VER="0.5.0.3";     TAR_VER_REGEXP="0\.5\.([1-9]|1[0-9]|0\.[3-9]|0\.1[0-9])\.?"
+                       # >= 0.5.0.3  && < 0.6
 HASHABLE_VER="1.2.4.0"; HASHABLE_VER_REGEXP="1\."
                        # 1.*
 
diff --git a/cabal-install/cabal-install.cabal b/cabal-install/cabal-install.cabal
index 60ec3c4a2a3..bb55b92cd8b 100644
--- a/cabal-install/cabal-install.cabal
+++ b/cabal-install/cabal-install.cabal
@@ -261,7 +261,7 @@ executable cabal
         pretty     >= 1.1      && < 1.2,
         random     >= 1        && < 1.2,
         stm        >= 2.0      && < 3,
-        tar        >= 0.5.0.1  && < 0.6,
+        tar        >= 0.5.0.3  && < 0.6,
         time       >= 1.4      && < 1.7,
         zlib       >= 0.5.3    && < 0.7,
         hackage-security >= 0.5.1 && < 0.6