Red Hat Product Errata RHSA-2026:48225 - Security Advisory Issued: 2026-07-29 Updated: 2026-07-29 RHSA-2026:48225 - Security Advisory Overview Updated Packages Synopsis Important: perl:5.32 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for the perl:5.32 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fix(es): perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size (CVE-2026-9538) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2481315 - CVE-2026-9538 perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size CVEs CVE-2026-9538 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM perl-5.32.1-474.module+el8.10.0+24099+8aa2f756.src.rpm SHA-256: 5565fd2a2ae09018492a796f4516e705d9e6af100da6eafa4a6d433a8f14f773 perl-Algorithm-Diff-1.1903-10.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: 7e3acb13ac72cd12ab67578d38b21eab91aade45a1c9e962ae06d639506b2c4d perl-Archive-Tar-2.38-5.module+el8.10.0+24544+66a14188.src.rpm SHA-256: 27ddccf27713d764792ae92db5b5d9023d3d5f996132f2df81f65ef40593818e perl-Archive-Zip-1.68-3.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: 9c29b0a613c7b1066d3920c644b8fb2690b65ccf2de25b0ed82e9a469eb235bf perl-CPAN-2.28-5.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: dacdd99923eb1257e5b09ea06b812df70c04e2095398373eb5799a9aca3de18e perl-CPAN-DistnameInfo-0.12-13.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: 0f34f25d23282b6ebd8fe4a7779b3b4e160a5191325b74639d6ac64686f20d49 perl-CPAN-Meta-2.150010-397.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: 47ef010da0b97a44c954edac36014f8a4328a60338d6d4ceeebea510ed2a7897 perl-CPAN-Meta-Requirements-2.140-397.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: a3f1d270675730679769b2ac6b35d230c1aea8b16fc86d6df97ae82572ef9789 perl-CPAN-Meta-YAML-0.018-1001.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: e0cbbd348c1f4ec56515bc8ed9c9fa34b8d1ca6f810ce7cbd0e69a48ce58dd67 perl-Carp-1.50-439.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: 08f05c27694b01bfc3d86f7d1467da9f6843a32d9732ac05d111d49bb7f32c9b perl-Compress-Bzip2-2.28-2.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: f8c1a166aa7b46fb67666ce877307736fbc10fab2ecb92504cccb7ec659a3001 perl-Compress-Raw-Bzip2-2.096-1.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: 28a94915e26d23f5de81cbf276517a36ba426a62934ce387cbdaa5abe3ce3fac perl-Compress-Raw-Lzma-2.096-1.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: cf13a9ca0ed9984846e7117df534ba14fcf083ef694d98b9d23a0f81ed792255 perl-Compress-Raw-Zlib-2.096-2.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: 0fe83fd447426c79b487d6e549682327aa3285d0bc5272468fcbba1d45172dfe perl-Config-Perl-V-0.32-441.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: c277295902b92a9483c20121d79119c3047f2a1468ed70f6a5db9c4c9c1773fa perl-DB_File-1.855-1.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: e074b75497c1d6dd77406abf843b158456b644ef44956bf3af8a1e97e08a51b0 perl-Data-Dumper-2.174-440.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: 00ee7923608a0ad450b3dea83fbeaf9c75a343262093a901eca583b990bacd70 perl-Data-OptList-0.110-7.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: 9d305a27913697e26fd0784c9675fbf6c0634e56bc8f0ea325fbc90ede62e889 perl-Data-Section-0.200007-8.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: 239cdecc962f810ada7a7f779777032b316ceed5f686d14c4d5637ab0e957691 perl-Devel-PPPort-3.62-1.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: 535004fafcffcd3f7c1a7fc0d8e48a68be8958baf1e6d9a15e86fcac08c71cdd perl-Devel-Size-0.83-3.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: d4e7af32ff7fa52e15676d121fd4e4dc7e105223b1802853e613ea2800095e28 perl-Digest-1.20-1.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: 8ffab8e683832f1482bbd3d40d45d2c790f8b7edf46073e51c7b03af32c1337b perl-Digest-MD5-2.58-1.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: 28002d388543ae1b8ae5e8c64e59f09883f39d806f31ccfc643716cad06da468 perl-Digest-SHA-6.02-2.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: f1ce5a94c304d0bdb5c31cf85c4c555580692dea443a6a3580f331c801133122 perl-Encode-3.08-461.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: 67689d6893d9cf56fcfed5e24cf24c5586ee7c815f4f2a7c679cd83220781012 perl-Encode-Locale-1.05-10.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: a8b75a89160efe63a9fa4470c131ecca8b166d641a67daccd75bef8521e2bb43 perl-Env-1.04-396.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: 7ea2e6fc94340279055b1c0f3cb24727ca8750de49c67febcddd402902aaafc2 perl-Exporter-5.74-458.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: 54b986a45f55a370f00f2dfe62ab7fe651990f4f9af34eb10dc019757d642de1 perl-ExtUtils-CBuilder-0.280236-1.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: 51be97147a979b15cc709b8a7fea26bf3c67652f26ffa44f89d0ed2f149eea26 perl-ExtUtils-Install-2.20-1.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: c27c49865a5a9a6985a9a2d463098a288a0e07a9e0e7197506eb5e948e039391 perl-ExtUtils-MakeMaker-7.46-3.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: f432290ba403f44ce039db1871f48c27b03270688787ae8a974e441c79daf973 perl-ExtUtils-Manifest-1.73-1.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: 9027e43d7b76b3cc323c869af413a534930200c0d60bfd56573deaa50c92ba4a perl-ExtUtils-ParseXS-3.40-439.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: bed1ee80d4194bc50e8e89cd869ac3e7f3c12e568443562b6b5d32caa868af54 perl-Fedora-VSP-0.001-10.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: 0fbd2c6ca586f8f9b4e4ed990ead71601ce130db68aca9a833bbd27f16c9db7b perl-File-Fetch-1.00-1.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: 08913ca033b237caf5db8099fcc809482fd6c564ca1d7cbb5630b9c88f048ae5 perl-File-HomeDir-1.004-6.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: f7217dc875d821e38371169bb435e194c17d7a5eeb5affcee4f51ad236c4b857 perl-File-Path-2.16-439.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: e037a365e750ea4abbf540d7b9a83e717448bf8a38d2c2ce95f54606962f1b7f perl-File-Temp-0.231.100-1.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: f0de5ab0fb89d5f6272351a2e8e073fcd9aad0a7ba201f8506bbbc89c9e0eb26 perl-File-Which-1.23-4.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: 86858e9d49eff2e9ad7d87bd4be7d5d67662b477e1626388ea28e4a3e87baf87 perl-Filter-1.60-1.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: e0fca42323da9f3e39dd283b2fbae9c90e6f91a8b4533bd38b3f6e5a0b3a78c8 perl-Filter-Simple-0.96-457.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: 428457a5038a3411a33408dd53691056015c181b1f2b50c864e5c1a658854d84 perl-Getopt-Long-2.52-1.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: f1c3f36b6d1a629d672f82a269da6751ce44b7f4aeb5291852154faf73aacfa0 perl-HTTP-Tiny-0.078-1.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: b745c84ee3427f05f77fc6b0b72cece3f50835deb04675ba0d7cd88dbf0045d0 perl-IO-Compress-2.096-2.module+el8.10.0+24402+ce90c7a0.src.rpm SHA-256: 686388c89187b1b9fce233c5f353c3423da318588cb60ec581187c390b40166d perl-IO-Compress-Lzma-2.096-1.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: 3bc11a0adb4c74648f337c33f0d27a7e1c8624904097e73cb903088f125c34ea perl-IO-Socket-IP-0.41-2.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: 1455f1b49a96abcc570e94e004645bf867eee9a23df5eebd90c43106bc648402 perl-IPC-Cmd-1.04-2.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: 452c9e2df3586381592aea7c8b476f78e22b50678f053994668b7c48466455a0 perl-IPC-SysV-2.09-1.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: f011dab49c60051fc27d8d2a7c4874deec604eea85f2c198d29f9ceb3e05554a perl-IPC-System-Simple-1.30-3.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: f8e9178f844649a9cfd56d642fe931bd1099fe6ef61a87e240e821ebefbe1d19 perl-Importer-0.025-6.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: 3af3343b51d012464a5b78463a66dcc21851a0a27f335351a0fc40f2695bba9e perl-JSON-PP-4.04-2.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: 39e3a9f57011e32214e18378095a57fb97fda4e08b6ab7454e676ec03401fa22 perl-Locale-Maketext-1.29-440.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: ece26d69ce4e4d1286932766400bb5311fe8ada8868ad0195e1a6245969748f8 perl-MIME-Base64-3.15-1001.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: 4388f0dd0aacfadad208c7baec534df2e89855bd4e13be069a944d5cebb95eb5 perl-MRO-Compat-0.13-5.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: f1f3a388163a132ba86b84c87f75b2fb10cabfdc5ba39e2e8f29d89a7d66fbe4 perl-Math-BigInt-1.9998.18-1.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: 43effb0bfc02d07c8a05ec36a6a50cdb395aa7224c61a2fac9b7263dff7aad74 perl-Math-BigInt-FastCalc-0.500.900-1.module+el8.10.0+21354+3ad137bb.src.rpm SHA-256: 9014b5dc028bcbd11eb05c9ed202846aa201548132ec6b97b46621
A vulnerability (CVE-2026-9538, CVSS 7.5 HIGH) in the Perl Archive::Tar module allows for a Denial of Service attack via a crafted tar archive header containing an excessively large entry size. The vulnerability affects versions of Archive::Tar prior to 3.10, and is fixed in version 3.10.