Description
Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | perl | 5.10.0-19 | — |
| Debian 13 | perl | 5.10.0-19 | — |
| Debian 12 | perl | 5.10.0-19 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | perl-Archive-Tar | 1:1.39.1-1.el5_5.1 | RHSA-2010:0505 |
| RHEL 4 | perl-Archive-Tar | 1.39.1-1.el4_8.1 | RHSA-2010:0505 |
Advisories 1
- RHSA-2010:0505 Red Hat Security Advisory: perl-Archive-Tar security update Red Hat Security Advisories (RHSA) · Nov 22, 2025
References
- 33116 third-party-advisory
- oval:org.mitre.oval:def:11658 vdb-entry signature
- perl-archivetar-directory-traversal(38285) vdb-entry
- http://rt.cpan.org/Public/Bug/Display.html?id=29517
- ADV-2007-3755 vdb-entry
- 26355 vdb-entry
- USN-700-1 vendor-advisory
- 40410 vdb-entry
- https://issues.rpath.com/browse/RPL-1716
- 27539 third-party-advisory
- 33314 third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=295021
- USN-700-2 vendor-advisory
- GLSA-200812-10 vendor-advisory
- http://rt.cpan.org/Public/Bug/Display.html?id=30380