rpms/perl-Archive-Tar
7
0
Fork 0
Code Issues Pull Requests Releases Activity
A module for Perl manipulation of .tar files
7 Commits 27 Branches 32 Tags 227 KiB
fa57991f9d
Go to file
RHEL Packaging Agent fa57991f9d Fix CVE-2026-9538: cap per-entry declared size to prevent memory DoS 
Backport upstream commit f9af0142 to perl-Archive-Tar 2.38
to fix CVE-2026-9538. The patch adds a $MAX_FILE_SIZE
variable (default 1 GiB) that caps the per-entry declared
size accepted when reading an archive, preventing memory DoS
from attacker-controlled tar header size fields.

CVE: CVE-2026-9538
Upstream patches:
 - f9af014260.patch
Resolves: RHEL-191916

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-08-03 08:52:34 +00:00
.gitignore RHEL 9.0.0 Alpha bootstrap 2020-10-15 23:17:44 +02:00
Archive-Tar-2.02-Do-not-sleep-in-Makefile.PL.patch RHEL 9.0.0 Alpha bootstrap 2020-10-15 23:17:44 +02:00
perl-Archive-Tar-2.38-CVE-2026-9538.patch Fix CVE-2026-9538: cap per-entry declared size to prevent memory DoS 2026-08-03 08:52:34 +00:00
perl-Archive-Tar-2.38-RHEL-181658.patch Fix CVE-2026-42496 in perl-Archive-Tar (symlink/hardlink validation) 2026-07-29 09:58:37 +00:00
perl-Archive-Tar.rpmlintrc RHEL 9.0.0 Alpha bootstrap 2020-10-15 23:17:44 +02:00
perl-Archive-Tar.spec Fix CVE-2026-9538: cap per-entry declared size to prevent memory DoS 2026-08-03 08:52:34 +00:00
sources RHEL 9.0.0 Alpha bootstrap 2020-10-15 23:17:44 +02:00