Red Hat Security AdvisoryRHSA-2019:2097
perl-Archive-Tar security update
Released 2019-08-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) perl-Archive-Tar-1.92-3.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) perl-Archive-Tar-1.92-3.el7
- Red Hat Enterprise Linux Server (v. 7) perl-Archive-Tar-1.92-3.el7
- Red Hat Enterprise Linux Workstation (v. 7) perl-Archive-Tar-1.92-3.el7
Fixes 1 record
Priority MEDIUM 43
In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite arbitrary files, via an archive file containing a symlink and a regular file wit…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.0731 · Published 2018-06-07 · Partial fix CWE-59
