perl-Archive-Tar-1.39.1-1.AXS3.1

エラータID: AXSA:2010-373:01

Release date: 
Friday, July 9, 2010 - 12:57
Subject: 
perl-Archive-Tar-1.39.1-1.AXS3.1
Affected Channels: 
Asianux Server 3 for x86
Asianux Server 3 for x86_64
Severity: 
Moderate
Description: 

Archive::Tar provides an object oriented mechanism for handling tar files. It provides class methods for quick and easy files handling while also allowing for the creation of tar file objects for custom manipulation. If you have the IO::Zlib module installed, Archive::Tar will also support compressed or gzipped tar files.
Security issues fixed with this release:
CVE-2007-4829
Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has '..' sequences.

Solution: 

Update packages.

CVEs: 
CVE-2007-4829
Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences.


Additional Info: 

N/A

Download: 

SRPMS
  1. perl-Archive-Tar-1.39.1-1.AXS3.1.src.rpm
    MD5: 476f32a55ced9a38d14655d8e2d8cb11
    SHA-256: 26c99b304ba698e67ba2d92d2a5817282f648f7edc8de4312482cc16a7163d14
    Size: 50.27 kB

Asianux Server 3 for x86
  1. perl-Archive-Tar-1.39.1-1.AXS3.1.noarch.rpm
    MD5: 896f84df96a9b4d64c1f7cc106047519
    SHA-256: 96ad2d4c31a442cee66e9fab7224de04836cb5cbe50c6a24dd729044492fbaba
    Size: 52.86 kB

Asianux Server 3 for x86_64
  1. perl-Archive-Tar-1.39.1-1.AXS3.1.noarch.rpm
    MD5: 5e09576e9fff78c07a0e432d597e6fb8
    SHA-256: 073f21f1c06fde165a3faa34930bb02351b572ca8809b1087b70fa57fdd3d1fd
    Size: 52.82 kB