Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2017:0429-1

Опубликовано: 09 фев. 2017
Источник: suse-cvrf

Описание

Security update for rubygem-minitar

This update for rubygem-minitar fixes the following issues:

  • CVE-2016-10173: Fixed a directory traversal vulnerability in rubygem-minitar, rubygem-archive-tar-minitar. (boo#1021740)

Список пакетов

openSUSE Leap 42.2
ruby2.1-rubygem-minitar-0.5.4-3.1
ruby2.1-rubygem-minitar-doc-0.5.4-3.1
rubygem-minitar-0.5.4-3.1

Ссылки

Описание

Directory traversal vulnerability in the minitar before 0.6 and archive-tar-minitar 0.5.2 gems for Ruby allows remote attackers to write to arbitrary files via a .. (dot dot) in a TAR archive entry.

Затронутые продукты
openSUSE Leap 42.2:ruby2.1-rubygem-minitar-0.5.4-3.1
openSUSE Leap 42.2:ruby2.1-rubygem-minitar-doc-0.5.4-3.1
openSUSE Leap 42.2:rubygem-minitar-0.5.4-3.1
Ссылки