Archive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction directory

The publication date reported by the vendor.

The vendor changed the advisory after it was first published.

We collected the advisory from the official source.