RHSA-2010:0505: Moderate: perl-Archive-Tar security update

First published: Thu Jul 01 2010(Updated: )

The Archive::Tar module provides a mechanism for Perl scripts to manipulate<br>tar archive files.<br>Multiple directory traversal flaws were discovered in the Archive::Tar<br>module. A specially-crafted tar file could cause a Perl script, using the<br>Archive::Tar module to extract the archive, to overwrite an arbitrary file<br>writable by the user running the script. (CVE-2007-4829)<br>This package upgrades the Archive::Tar module to version 1.39_01. Refer to<br>the Archive::Tar module's changes file, linked to in the References, for a<br>full list of changes.<br>Users of perl-Archive-Tar are advised to upgrade to this updated package,<br>which corrects these issues. All applications using the Archive::Tar module<br>must be restarted for this update to take effect.<br>

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/description
• agent/event
• agent/first-publish-date
• agent/last-modified-date
• agent/references
• agent/remedy
• agent/severity
• agent/softwarecombine
• agent/tags
• agent/title
• agent/type
• collector/redhat-errata
• source/Red Hat
• anchor-id/RHSA-2010:0505