TI-2026-30779 CVE-2026-42496 · GHSA-8p37-q9qq-hgx8
Link following in BINGOS Archive::Tar
Priority MEDIUM 46
Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory.
RHSA-2026:30856
perl-Archive-Tar security update
Released 2026-06-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) perl-Archive-Tar-2.38-6.el9_8.1