FEDORA-2018-4e088b6d7c

security update in Fedora 28 for perl-Archive-Tar

Status: stable a year ago

This release fixes CVE-2018-12015 vulnerability (a directory traversal). It also fixes creating a file with a trailing white space on the file name. It also allows to archive absolute path names and it speeds up extracting large archives.

How to install

sudo dnf upgrade --advisory=FEDORA-2018-4e088b6d7c

Comments 6

This update has been submitted for testing by ppisar.

ppisar edited this update.

This update has been pushed to testing.

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

This update has been submitted for stable by ppisar.

This update has been pushed to stable.

Content Type
RPM
Status
stable
Test Gating
Submitted by
Update Type
security
Update Severity
unspecified
Karma
0
stable threshold: 3
unstable threshold: -3
Autopush
Disabled
Dates
submitted a year ago
in testing a year ago
in stable a year ago
modified a year ago

Related Bugs 3

00 #1588760 CVE-2018-12015 perl: Directory traversal in Archive::Tar
00 #1588761 CVE-2018-12015 perl-Archive-Tar: Directory traversal in Archive::Tar [fedora-all]
00 #1589101 perl-Archive-Tar-2.28 is available

Automated Test Results