Fedora alert FEDORA-2026-6988e8f652 (perl-Archive-Tar)
| From: | updates--- via package-announce <package-announce@lists.fedoraproject.org> | |
| To: | package-announce@lists.fedoraproject.org | |
| Subject: | [SECURITY] Fedora 43 Update: perl-Archive-Tar-3.04-522.fc43 | |
| Date: | Fri, 19 Jun 2026 01:10:07 +0000 | |
| Message-ID: | <20260619011007.C0B446FEFA@bastion01.rdu3.fedoraproject.org> | |
| Archive-link: | Article |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-6988e8f652 2026-06-19 01:08:57.989060+00:00 -------------------------------------------------------------------------------- Name : perl-Archive-Tar Product : Fedora 43 Version : 3.04 Release : 522.fc43 URL : https://metacpan.org/release/Archive-Tar Summary : A module for Perl manipulation of .tar files Description : Archive::Tar provides an object oriented mechanism for handling tar files. It provides class methods for quick and easy files handling while also allowing for the creation of tar file objects for custom manipulation. If you have the IO::Zlib module installed, Archive::Tar will also support compressed or gzipped tar files. -------------------------------------------------------------------------------- Update Information: Fixed CVE-2026-42496 - Path traversal via crafted symlinks allows arbitrary file access Backported from 3.08 -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 3 2026 Jitka Plesnikova <jplesnik@redhat.com> - 3.04-522 - Fix CVE-2026-42496 (rhbz#2484320) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2484320 - CVE-2026-42496 perl-Archive-Tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2484320 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-6988e8f652' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgr... All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-cond... List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-ann... Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new