Synopsis: Moderate: perl-Archive-Tar security update Issue date: 2010-07-01 CVE Names: CVE-2007-4829 Multiple directory traversal flaws were discovered in the Archive::Tar module. A specially-crafted tar file could cause a Perl script, using the Archive::Tar module to extract the archive, to overwrite an arbitrary file writable by the user running the script. (CVE-2007-4829) This package upgrades the Archive::Tar module to version 1.39_01. All applications using the Archive::Tar module must be restarted for this update to take effect. Note: SL 40-45 needed perl-IO-Zlib SL 4.x SRPMS: perl-Archive-Tar-1.39.1-1.el4_8.1.src.rpm i386: perl-Archive-Tar-1.39.1-1.el4_8.1.noarch.rpm perl-IO-Zlib-1.04-4.2.el4.noarch.rpm x86_64: perl-Archive-Tar-1.39.1-1.el4_8.1.noarch.rpm perl-IO-Zlib-1.04-4.2.el4.noarch.rpm SL 5.x SRPMS: perl-Archive-Tar-1.39.1-1.el5_5.1.src.rpm i386: perl-Archive-Tar-1.39.1-1.el5_5.1.noarch.rpm x86_64: perl-Archive-Tar-1.39.1-1.el5_5.1.noarch.rpm -Connie Sieh -Troy Dawson