Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-12015: It was found that the Archive::Tar module did not properly sanitize symbolic links when extracting tar archives. An attacker, able to provide a specially crafted archive for processing, could use this flaw to write or overwrite arbitrary files in the context of the Perl interpreter. 99999: CVE-2018-12015 perl: Directory traversal in Archive::Tar
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | perl-Archive-Tar | 0:1.92-3.amzn2 |
Vulnerabilities 1
-
Unscored —
In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mech…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-12015.html