Vulnerability · Published May 26, 2026 · Assigned by CPANSec
CVE-2026-42496Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory
Critical 9.1
In plain English
A critical-severity path traversal in Archive::Tar from BINGOS. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 43% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)9.1Critical
Exploit odds (30 days)0.5%top 56.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory. _make_special_file() passes the tar header's linkname to symlink() without validating it against absolute paths or .. segments. The secure-extract mode check that guards regular file extraction does not cover the symlink target. A subsequent open through the extracted name reads or writes the attacker chosen path.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | perl | 4:5.32.1-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Algorithm-Diff | 1.1903-10.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:10 | perl-Archive-Tar | 3.02-512.el10_2.1 | ALSA-2026:30857 |
| AlmaLinux:8 | perl-Archive-Tar | 2.30-2.el8_10 | ALSA-2026:30852 |
| AlmaLinux:8 | perl-Archive-Tar | 2.38-4.module_el8.10.0+4205+6175afda | ALSA-2026:30851 |
| AlmaLinux:9 | perl-Archive-Tar | 2.38-6.el9_8.1 | ALSA-2026:30856 |
| AlmaLinux:8 | perl-Archive-Zip | 1.68-3.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Attribute-Handlers | 1.01-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-AutoLoader | 5.74-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-AutoSplit | 5.74-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-B | 1.80-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Benchmark | 1.23-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-CPAN | 2.28-5.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-CPAN-DistnameInfo | 0.12-13.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-CPAN-Meta | 2.150010-397.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-CPAN-Meta-Requirements | 2.140-397.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-CPAN-Meta-YAML | 0.018-1001.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Carp | 1.50-439.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Class-Struct | 0.66-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Compress-Bzip2 | 2.28-2.module_el8.6.0+3181+91434291 | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Compress-Bzip2 | 2.28-2.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Compress-Raw-Bzip2 | 2.096-1.module_el8.6.0+3181+91434291 | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Compress-Raw-Bzip2 | 2.096-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Compress-Raw-Lzma | 2.096-1.module_el8.6.0+3181+91434291 | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Compress-Raw-Lzma | 2.096-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Compress-Raw-Zlib | 2.096-2.module_el8.10.0+3779+d5938d28 | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Config-Extensions | 0.03-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Config-Perl-V | 0.32-441.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-DBM_Filter | 0.06-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-DB_File | 1.855-1.module_el8.6.0+3181+91434291 | ALSA-2026:30851 |
| AlmaLinux:8 | perl-DB_File | 1.855-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Data-Dumper | 2.174-440.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Data-Dumper | 2.174-440.module_el8.6.0+3181+91434291 | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Data-OptList | 0.110-7.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Data-Section | 0.200007-8.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Devel-PPPort | 3.62-1.module_el8.6.0+3181+91434291 | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Devel-PPPort | 3.62-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Devel-Peek | 1.28-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Devel-SelfStubber | 1.06-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Devel-Size | 0.83-3.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Devel-Size | 0.83-3.module_el8.6.0+3181+91434291 | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Digest | 1.20-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Digest-MD5 | 2.58-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Digest-MD5 | 2.58-1.module_el8.6.0+3181+91434291 | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Digest-SHA | 1:6.02-2.module_el8.6.0+3181+91434291 | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Digest-SHA | 1:6.02-2.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-DirHandle | 1.05-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Dumpvalue | 2.27-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-DynaLoader | 1.47-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Encode | 4:3.08-461.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Encode | 4:3.08-461.module_el8.6.0+3181+91434291 | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Encode-Locale | 1.05-10.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Encode-devel | 4:3.08-461.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Encode-devel | 4:3.08-461.module_el8.6.0+3181+91434291 | ALSA-2026:30851 |
| AlmaLinux:8 | perl-English | 1.11-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Env | 1.04-396.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Errno | 1.30-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Exporter | 5.74-458.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-ExtUtils-CBuilder | 1:0.280236-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-ExtUtils-Command | 2:7.46-3.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-ExtUtils-Constant | 0.25-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-ExtUtils-Embed | 1.35-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-ExtUtils-Install | 2.20-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-ExtUtils-MM-Utils | 2:7.46-3.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-ExtUtils-MakeMaker | 2:7.46-3.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-ExtUtils-Manifest | 1:1.73-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-ExtUtils-Miniperl | 1.09-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-ExtUtils-ParseXS | 1:3.40-439.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Fcntl | 1.13-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Fedora-VSP | 0.001-10.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-File-Basename | 2.85-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-File-Compare | 1.100.600-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-File-Copy | 2.34-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-File-DosGlob | 1.12-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-File-Fetch | 1.00-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-File-Find | 1.37-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-File-HomeDir | 1.004-6.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-File-Path | 2.16-439.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-File-Temp | 1:0.231.100-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-File-Which | 1.23-4.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-File-stat | 1.09-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-FileCache | 1.10-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-FileHandle | 2.03-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Filter | 2:1.60-1.module_el8.6.0+3181+91434291 | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Filter | 2:1.60-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Filter-Simple | 0.96-457.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-FindBin | 1.51-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-GDBM_File | 1.18-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Getopt-Long | 1:2.52-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Getopt-Std | 1.12-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-HTTP-Tiny | 0.078-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Hash-Util | 0.23-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Hash-Util-FieldHash | 1.20-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-I18N-Collate | 1.02-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-I18N-LangTags | 0.44-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-I18N-Langinfo | 0.19-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-IO | 1.43-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-IO-Compress | 2.096-2.module_el8.10.0+4205+6175afda | ALSA-2026:30851 |
| AlmaLinux:8 | perl-IO-Compress-Lzma | 2.096-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-IO-Socket-IP | 0.41-2.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-IO-Zlib | 1:1.10-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-IPC-Cmd | 2:1.04-2.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-IPC-Open3 | 1.21-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-IPC-SysV | 2.09-1.module_el8.6.0+3181+91434291 | ALSA-2026:30851 |
| AlmaLinux:8 | perl-IPC-SysV | 2.09-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-IPC-System-Simple | 1.30-3.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Importer | 0.025-6.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-JSON-PP | 1:4.04-2.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Locale-Maketext | 1.29-440.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Locale-Maketext-Simple | 1:0.21-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-MIME-Base64 | 3.15-1001.module_el8.6.0+3181+91434291 | ALSA-2026:30851 |
| AlmaLinux:8 | perl-MIME-Base64 | 3.15-1001.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-MRO-Compat | 0.13-5.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Math-BigInt | 1:1.9998.18-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Math-BigInt-FastCalc | 0.500.900-1.module_el8.6.0+3181+91434291 | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Math-BigInt-FastCalc | 0.500.900-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Math-BigRat | 0.2614-2.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Math-Complex | 1.59-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Memoize | 1.03-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Module-Build | 2:0.42.31-5.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Module-CoreList | 1:5.20211020-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Module-CoreList-tools | 1:5.20211020-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Module-Load | 1:0.36-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Module-Load-Conditional | 0.74-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Module-Loaded | 1:0.08-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Module-Metadata | 1.000037-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-NDBM_File | 1.15-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-NEXT | 0.67-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Net | 1.02-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Net-Ping | 2.72-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-ODBM_File | 1.16-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Object-HashBase | 0.009-4.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Object-HashBase-tools | 0.009-4.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Opcode | 1.48-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-POSIX | 1.94-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Package-Generator | 1.106-12.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Params-Check | 1:0.38-396.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Params-Util | 1.102-2.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Params-Util | 1.102-2.module_el8.6.0+3181+91434291 | ALSA-2026:30851 |
| AlmaLinux:8 | perl-PathTools | 3.78-439.module_el8.6.0+3181+91434291 | ALSA-2026:30851 |
| AlmaLinux:8 | perl-PathTools | 3.78-439.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Perl-OSType | 1.010-397.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-PerlIO-via-QuotedPrint | 0.09-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Pod-Checker | 4:1.74-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Pod-Escapes | 1:1.07-396.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Pod-Functions | 1.13-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Pod-Html | 1.25-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Pod-Parser | 1.63-1001.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Pod-Perldoc | 3.28.01-443.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Pod-Simple | 1:3.42-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Pod-Usage | 4:2.01-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Safe | 2.41-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Scalar-List-Utils | 4:1.55-457.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Scalar-List-Utils | 4:1.55-457.module_el8.6.0+3181+91434291 | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Search-Dict | 1.07-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-SelectSaver | 1.02-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-SelfLoader | 1.26-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Socket | 4:2.031-1.module_el8.6.0+3181+91434291 | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Socket | 4:2.031-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Software-License | 0.103014-5.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Storable | 1:3.21-457.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Storable | 1:3.21-457.module_el8.6.0+3181+91434291 | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Sub-Exporter | 0.987-17.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Sub-Install | 0.928-15.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Symbol | 1.08-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Sys-Hostname | 1.23-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Sys-Syslog | 0.36-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Sys-Syslog | 0.36-1.module_el8.6.0+3181+91434291 | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Term-ANSIColor | 5.01-458.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Term-Cap | 1.17-396.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Term-Complete | 1.403-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Term-ReadLine | 1.17-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Term-Table | 0.015-2.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Test | 1.31-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Test-Harness | 1:3.42-2.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Test-Simple | 3:1.302181-2.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Text-Abbrev | 1.02-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Text-Balanced | 2.04-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Text-Diff | 1.45-7.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Text-Glob | 0.11-5.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Text-ParseWords | 3.30-396.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Text-Tabs+Wrap | 2013.0523-396.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Text-Template | 1.58-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Thread | 3.05-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Thread-Queue | 3.14-457.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Thread-Semaphore | 2.13-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Tie | 4.6-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Tie-File | 1.06-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Tie-Memoize | 1.1-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Tie-RefHash | 1.39-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Time | 1.03-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Time-HiRes | 4:1.9764-459.module_el8.6.0+3181+91434291 | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Time-HiRes | 4:1.9764-459.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Time-Local | 2:1.300-4.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Time-Piece | 1.3401-474.module_el8.10.0+4162+0aac7c4c | ALSA-2026:30851 |
| AlmaLinux:8 | perl-URI | 1.76-5.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Unicode-Collate | 1.29-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Unicode-Collate | 1.29-1.module_el8.6.0+3181+91434291 | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Unicode-Normalize | 1.27-458.module_el8.6.0+3181+91434291 | ALSA-2026:30851 |
| AlmaLinux:8 | perl-Unicode-Normalize | 1.27-458.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:30851 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| BINGOS | Archive::Tar | 0 – before 3.08 |
Weakness: CWE-59, CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
References
- https://github.com/jib/archive-tar-new/commit/17c873492a05eddc0de18c1485e0b2cccd5a9158.patch patch
- https://metacpan.org/release/BINGOS/Archive-Tar-3.08/changes release-notes
- https://www.cve.org/CVERecord?id=CVE-2026-42497 related
- https://access.redhat.com/security/cve/CVE-2026-42496 vdb-entry, x_refsource_REDHAT
- RHBZ#2481314 issue-tracking, x_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42496.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:30857 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:30851 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:30856 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:30852 vendor-advisory, x_refsource_REDHAT