ALT-PU-2022-2889

Высокий

ALT-PU-2022-2889: package arj update to version 3.10.22-alt8

Источник

errata.altlinux.org

Дата публикации

20.10.2022

Дата обновления

20.10.2022

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

Описание

This update upgrades arj to version 3.10.22-alt8.

Устраненные уязвимости3

CVE-2015-0556

Средний 5.8

Дата публикации: 08.04.2015

CWE-59

Open-source ARJ archiver 3.10.22 allows remote attackers to conduct directory traversal attacks via a symlink attack in an ARJ archive.

CVSS 2.0

Средний 5.8

AV:N/AC:M/Au:N/C:N/I:P/A:P

Access vector: Network
Complexity: Medium
Authentication: None
Confidentiality: None
Integrity: Partial
Availability: Partial

Ссылки

CVE-2015-0556 https://nvd.nist.gov/vuln/detail/CVE-2015-0556

Ссылки1

ALT-PU-2022-2889 https://errata.altlinux.org/ALT-PU-2022-2889

Связанные уязвимости

ALT-PU-2022-2941

altlinux

около 4 лет назад

ALT-PU-2022-2941: package `arj` update to version 3.10.22-alt9

CVE-2015-0556

ubuntu

больше 11 лет назад

Open-source ARJ archiver 3.10.22 allows remote attackers to conduct directory traversal attacks via a symlink attack in an ARJ archive.

CVE-2015-0556

nvd

больше 11 лет назад

Open-source ARJ archiver 3.10.22 allows remote attackers to conduct directory traversal attacks via a symlink attack in an ARJ archive.

CVE-2015-0556

debian

больше 11 лет назад

Open-source ARJ archiver 3.10.22 allows remote attackers to conduct di ...

GHSA-pxmh-fjvc-v752

github

больше 4 лет назад

Open-source ARJ archiver 3.10.22 allows remote attackers to conduct directory traversal attacks via a symlink attack in an ARJ archive.