rpms/perl-Archive-Tar
7
0
Fork 0
Code Issues Pull Requests Releases Activity
A module for Perl manipulation of .tar files
144 Commits 27 Branches 32 Tags 227 KiB
c10s
Go to file
RHEL Packaging Agent 8771fc464c Fix CVE-2026-9538: cap per-entry declared size to prevent memory DoS 
Backport upstream fix (commit f9af014) for CVE-2026-9538 which
adds a $MAX_FILE_SIZE cap (default 1 GiB) checked per entry
in _read_tar() to defend against attacker-controlled size-field
memory denial of service. A malicious tar archive with a small
compressed payload but a huge declared entry size could trigger
multi-GB memory allocation before the read completes.

CVE: CVE-2026-9538
Upstream patches:
 - f9af014260.patch
Resolves: RHEL-191919

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-08-03 08:43:56 +00:00
.fmf Package tests 2021-08-02 10:12:02 +02:00
plans Update tests and gating.yaml 2024-07-08 17:31:50 +02:00
tests Update tests and gating.yaml 2024-07-08 17:21:52 +02:00
.gitignore 3.02 bump 2023-04-13 15:23:28 +02:00
Archive-Tar-2.02-Do-not-sleep-in-Makefile.PL.patch 2.36 bump 2020-02-03 09:19:57 +01:00
gating.yaml Update tests and gating.yaml 2024-07-08 17:21:52 +02:00
perl-Archive-Tar-3.02-CVE-2026-9538.patch Fix CVE-2026-9538: cap per-entry declared size to prevent memory DoS 2026-08-03 08:43:56 +00:00
perl-Archive-Tar-3.02-RHEL-181653.patch Fix CVE-2026-42496 in perl-Archive-Tar (symlink/hardlink validation) 2026-07-29 10:02:33 +00:00
perl-Archive-Tar.rpmlintrc 2.38 bump 2020-06-25 11:42:53 +02:00
perl-Archive-Tar.spec Fix CVE-2026-9538: cap per-entry declared size to prevent memory DoS 2026-08-03 08:43:56 +00:00
sources 3.02 bump 2023-04-13 15:23:28 +02:00