tocsin

Alpine/perl: high 7.5

In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite arbitrary files, via an archive file containing a symlink an

Action: Upgrade perl to 5.26.2-r1 or later.

Affected

introducedfixedlast affected
05.26.2-r1-

Fixed versions

5.26.2-r1

Sources

published · modified · JSON