Описание
Security update for devscripts
This update for devscripts fixes the following issues:
- CVE-2014-1833: Fixed symlink directory traversal in uupdate (bsc#861514)
Список пакетов
SUSE Linux Enterprise Software Development Kit 12 SP5
checkbashisms-2.12.6-5.3.1
Ссылки
- Link for SUSE-SU-2024:2621-1
- E-Mail link for SUSE-SU-2024:2621-1
- SUSE Security Ratings
- SUSE Bug 861514
- SUSE CVE CVE-2014-1833 page
Описание
Directory traversal vulnerability in uupdate in devscripts 2.14.1 allows remote attackers to modify arbitrary files via a crafted .orig.tar file, related to a symlink.
Затронутые продукты
SUSE Linux Enterprise Software Development Kit 12 SP5:checkbashisms-2.12.6-5.3.1
Ссылки
- CVE-2014-1833
- SUSE Bug 861514