ELSA-2026-30852

ELSA-2026-30852 - perl-Archive-Tar security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-06-29

Description

[2.30-2]
- Fix CVE-2026-42496: validate symlink and hardlink targets in secure
extract mode
- Resolves: RHEL-181654

[2.30-1]
- 2.30 bump

[2.28-1]
- 2.28 bump
- Fixes CVE-2018-12015 (directory traversal) (bug #1588761)

[2.26-6]
- Do not run optional test on RHEL

[2.26-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[2.26-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[2.26-3]
- Perl 5.26 re-rebuild of bootstrapped packages

[2.26-2]
- Perl 5.26 rebuild

[2.26-1]
- 2.26 bump

[2.24-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

Related CVEs

CVE-2026-42496

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	perl-Archive-Tar-2.30-2.el8_10.src.rpm	e8ee48b3581f1a03d55ca12d444017125c682bd774ad9e8eea4bb2781a576c6e	-	ol8_aarch64_appstream
	perl-Archive-Tar-2.30-2.el8_10.noarch.rpm	b8a14f9617a16b8c59a91871af1ef6663d6f58d0e2ba025c04a691f6467086c8	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	perl-Archive-Tar-2.30-2.el8_10.src.rpm	e8ee48b3581f1a03d55ca12d444017125c682bd774ad9e8eea4bb2781a576c6e	-	ol8_x86_64_appstream
	perl-Archive-Tar-2.30-2.el8_10.noarch.rpm	b8a14f9617a16b8c59a91871af1ef6663d6f58d0e2ba025c04a691f6467086c8	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team