Debian/perl: high 7.5
In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite arbitrary files, via an archive file containing a symlink an
Action: Upgrade perl to 5.26.2-6 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.26.2-6 | - |
Fixed versions
| 5.26.2-6 |
Sources
- osv: DEBIAN-CVE-2018-12015#Debian:13/perl
- https://security-tracker.debian.org/tracker/CVE-2018-12015
published · modified · JSON