Red Hat Security Advisory

RHSA-2026:49525

perl-Archive-Tar security update

Released 2026-08-03 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2026-08380 CVE-2026-9538 · GHSA-rrh7-4pj2-xxq8

LOW 39

Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00517 Published 2026-05-26 Partial fix · 3.10 CWE-789