perl-Archive-Tar-2.38-6.el9_8.2
エラータID: AXSA:2026-1589:04
リリース日:
2026/08/20 Thursday - 20:54
題名:
perl-Archive-Tar-2.38-6.el9_8.2
影響のあるチャネル:
MIRACLE LINUX 9 for x86_64
Severity:
High
Description:
以下項目について対処しました。
[Security Fix]
- Perl の Archive::Tar モジュールには、リソースの制限を実施して
いない問題があるため、リモートの攻撃者により、サービス拒否攻撃
(リソース枯渇) を可能とする脆弱性が存在します。(CVE-2026-9538)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2026-9538
Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header. _read_tar() reads each entry's payload with $handle->read($$data, $block), where $block is derived from the entry's 12-byte size field in the tar header with no upper bound on that value. A crafted header declaring a multi-gigabyte size causes Perl to allocate a scalar of that size.
Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header. _read_tar() reads each entry's payload with $handle->read($$data, $block), where $block is derived from the entry's 12-byte size field in the tar header with no upper bound on that value. A crafted header declaring a multi-gigabyte size causes Perl to allocate a scalar of that size.
追加情報:
N/A
ダウンロード:
SRPMS
- perl-Archive-Tar-2.38-6.el9_8.2.src.rpm
MD5: 34b0b5e5da78ab85ad8c494058fd3572
SHA-256: 50b75e8a711528e797bda0821c9915dca246cc2580e800c97153d7fb40168ae6
Size: 78.79 kB
Asianux Server 9 for x86_64
- perl-Archive-Tar-2.38-6.el9_8.2.noarch.rpm
MD5: f50dfb83a02c4eef5da985b101d6ed17
SHA-256: 8a111670f881d65f78f0d4c5d0309e3c1a4347b831d11e0f687aa3b2654d3efc
Size: 75.20 kB
English