rpms/perl-Archive-Tar
7
0
Fork 0
Code Issues Pull Requests Releases Activity
144 Commits 27 Branches 32 Tags 227 KiB
8771fc464c
Commit Graph

144 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
RHEL Packaging Agent
8771fc464c Fix CVE-2026-9538: cap per-entry declared size to prevent memory DoS 
Backport upstream fix (commit f9af014) for CVE-2026-9538 which
adds a $MAX_FILE_SIZE cap (default 1 GiB) checked per entry
in _read_tar() to defend against attacker-controlled size-field
memory denial of service. A malicious tar archive with a small
compressed payload but a huge declared entry size could trigger
multi-GB memory allocation before the read completes.

CVE: CVE-2026-9538
Upstream patches:
 - f9af014260.patch
Resolves: RHEL-191919

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
 2026-08-03 08:43:56 +00:00
RHEL Packaging Agent
3af7e02570 Fix CVE-2026-42496 in perl-Archive-Tar (symlink/hardlink validation) 
Backport two upstream commits to fix symlink and hardlink
path traversal vulnerabilities in Archive::Tar's secure
extract mode (CVE-2026-42496, CVE-2026-42497).

The first commit adds validation of symlink and hardlink
link targets, rejecting absolute paths and directory
traversal via '..' components. The second commit fixes a
regression where valid in-tree symlinks containing '..'
were incorrectly rejected, by using the existing
_symlinks_resolver() function with a new strict parameter.

CVE: CVE-2026-42496 CVE-2026-42497
Upstream patches:
 - 17c873492a.patch
 - 484f71ea01.patch
Resolves: RHEL-181653

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
 2026-07-29 10:02:33 +00:00
Troy Dawson
cbfa3eec25 Bump release for October 2024 mass rebuild: 
Resolves: RHEL-64018
 2024-10-29 08:54:34 -07:00
Jitka Plesnikova
fe40d79562 Perl 5.40 re-rebuild of bootstrapped packages 2024-08-09 09:48:10 +02:00
Jitka Plesnikova
9c817bc19e Perl 5.40 rebuild 2024-08-08 13:28:46 +02:00
Jitka Plesnikova
2601dff67c Update tests and gating.yaml 2024-07-08 17:31:50 +02:00
Jitka Plesnikova
f3fb2e5a06 Update tests and gating.yaml 2024-07-08 17:21:52 +02:00
Troy Dawson
acfe0318e3 Bump release for June 2024 mass rebuild 2024-06-24 09:07:28 -07:00
Fedora Release Engineering
3d671323e1 Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-25 13:17:56 +00:00
Fedora Release Engineering
4e0e0d30c6 Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-21 12:25:39 +00:00
Jitka Plesnikova
fe00007822 Update using of %%patch 2023-09-19 11:04:44 +02:00
Fedora Release Engineering
8c8923c13d Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2023-07-20 19:17:07 +00:00
Jitka Plesnikova
20880dc133 Perl 5.38 re-rebuild of bootstrapped packages 2023-07-12 13:36:01 +02:00
Jitka Plesnikova
8419300400 Perl 5.38 rebuild 2023-07-11 10:31:43 +02:00
Jitka Plesnikova
3303c370fb 3.02 bump 2023-04-13 15:23:28 +02:00
Jitka Plesnikova
350748a1f3 3.00 bump 2023-03-27 10:54:39 +02:00
Fedora Release Engineering
507b11c637 Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2023-01-19 23:57:08 +00:00
Jitka Plesnikova
2e07ff1a6f Remove perl(MODULE_COMPAT), it will be replaced by generators 2023-01-13 10:15:34 +01:00
Jitka Plesnikova
c201ad5f8d Update license to SPDX format 2022-12-20 16:18:43 +01:00
Fedora Release Engineering
b2c1f0b6cb Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2022-07-22 03:16:52 +00:00
Jitka Plesnikova
c9a229801c Perl 5.36 re-rebuild of bootstrapped packages 2022-06-03 12:53:00 +02:00
Jitka Plesnikova
af6f6ebd8e Increase release to favour standalone package 2022-05-30 14:26:48 +02:00
Fedora Release Engineering
1cf026da12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2022-01-20 23:26:40 +00:00
Jitka Plesnikova
f862715fd2 Update dependencies 2021-08-02 10:50:15 +02:00
Jitka Plesnikova
4d19cded35 Package tests 2021-08-02 10:12:02 +02:00
Jitka Plesnikova
e5db0b0cea 2.40 bump 2021-08-02 09:50:14 +02:00
Fedora Release Engineering
00297ef53a - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2021-07-22 18:12:19 +00:00
Jitka Plesnikova
66c37c34f4 Perl 5.34 re-rebuild of bootstrapped packages 2021-05-24 09:59:20 +02:00
Jitka Plesnikova
fa19a2f299 Increase release to favour standalone package 2021-05-21 09:53:38 +02:00
Fedora Release Engineering
3fd5018fde - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2021-01-26 23:24:41 +00:00
Fedora Release Engineering
7a0709898e - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2020-07-28 13:38:35 +00:00
Jitka Plesnikova
ce07a3e3e7 Perl 5.32 re-rebuild of bootstrapped packages 2020-06-26 18:10:50 +02:00
Petr Písař
8c6b87c3da 2.38 bump 2020-06-25 11:42:53 +02:00
Jitka Plesnikova
48f1cbaad2 Increase release to favour standalone package 2020-06-22 13:35:38 +02:00
Petr Písař
cfb9ce9c5f Do not require non-core IO::Compress::Xz and IO::Uncompress::UnXz modules on bootstapping 2020-02-14 15:29:43 +01:00
Jitka Plesnikova
93e731a40a 2.36 bump 2020-02-03 09:19:57 +01:00
Jitka Plesnikova
1ce313093e 2.36 bump 2020-02-03 09:18:50 +01:00
Fedora Release Engineering
204a08ff75 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2020-01-29 21:33:14 +00:00
Fedora Release Engineering
923088c0b5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2019-07-26 00:36:55 +00:00
Jitka Plesnikova
41ceb82ddb Perl 5.30 re-rebuild of bootstrapped packages 2019-06-02 22:53:49 +02:00
Jitka Plesnikova
adf6129c5f Increase release to favour standalone package 2019-05-30 10:55:14 +02:00
Fedora Release Engineering
6d512c31a6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2019-02-01 18:29:14 +00:00
Jitka Plesnikova
45543fcb2f 2.32 bump 2018-09-13 16:08:36 +02:00
Fedora Release Engineering
bed6f173cc - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2018-07-13 15:50:23 +00:00
Jitka Plesnikova
369ea1ad61 Perl 5.28 re-rebuild of bootstrapped packages 2018-06-30 21:46:44 +02:00
Jitka Plesnikova
7020b496bd Increase release to favour standalone package 2018-06-27 02:14:43 +02:00
Jitka Plesnikova
1252ff5a28 2.30 bump 2018-06-19 17:26:52 +02:00
Petr Písař
6baa268adb Ammend bug number to CVE-2018-12015 2018-06-08 15:05:08 +02:00
Petr Písař
e07f872ff1 2.28 bump 2018-06-08 15:00:16 +02:00
Petr Písař
a2d8d77767 cpan.org addresses moved to MetaCPAN <https://fedoraproject.org/wiki/Changes/Perl_Move_to_MetaCPAN> 2018-06-04 14:34:01 +02:00