Synopsis: Moderate: perl-Archive-Tar security update
Issue date: 2010-07-01
CVE Names: CVE-2007-4829
Multiple directory traversal flaws were discovered in the Archive::Tar
module. A specially-crafted tar file could cause a Perl script, using
the Archive::Tar module to extract the archive, to overwrite an
arbitrary file writable by the user running the script. (CVE-2007-4829)
This package upgrades the Archive::Tar module to version 1.39_01.
All applications using the Archive::Tar module must be restarted for
this update to take effect.
Note: SL 40-45 needed perl-IO-Zlib
SL 4.x
SRPMS:
perl-Archive-Tar-1.39.1-1.el4_8.1.src.rpm
i386:
perl-Archive-Tar-1.39.1-1.el4_8.1.noarch.rpm
perl-IO-Zlib-1.04-4.2.el4.noarch.rpm
x86_64:
perl-Archive-Tar-1.39.1-1.el4_8.1.noarch.rpm
perl-IO-Zlib-1.04-4.2.el4.noarch.rpm
SL 5.x
SRPMS:
perl-Archive-Tar-1.39.1-1.el5_5.1.src.rpm
i386:
perl-Archive-Tar-1.39.1-1.el5_5.1.noarch.rpm
x86_64:
perl-Archive-Tar-1.39.1-1.el5_5.1.noarch.rpm
-Connie Sieh
-Troy Dawson