Описание
tar-fs provides filesystem bindings for tar-stream. Versions prior to 3.0.9, 2.1.3, and 1.16.5 have an issue where an extract can write outside the specified dir with a specific tarball. This has been patched in versions 3.0.9, 2.1.3, and 1.16.5. As a workaround, use the ignore option to ignore non files/directories.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 3.1.2+~cs2.0.4-1 |
| esm-apps/jammy | released | 2.1.1-6ubuntu0.22.04.1~esm1 |
| esm-apps/noble | released | 2.1.1-6ubuntu0.24.04.1~esm1 |
| esm-apps/resolute | not-affected | 3.1.2+~cs2.0.4-1 |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | needed | |
| noble | needed | |
| oracular | ignored | end of life, was needs-triage |
| plucky | ignored | end of life, was needs-triage |
Показывать по
EPSS
Связанные уязвимости
tar-fs provides filesystem bindings for tar-stream. Versions prior to 3.0.9, 2.1.3, and 1.16.5 have an issue where an extract can write outside the specified dir with a specific tarball. This has been patched in versions 3.0.9, 2.1.3, and 1.16.5. As a workaround, use the ignore option to ignore non files/directories.
tar-fs provides filesystem bindings for tar-stream. Versions prior to 3.0.9, 2.1.3, and 1.16.5 have an issue where an extract can write outside the specified dir with a specific tarball. This has been patched in versions 3.0.9, 2.1.3, and 1.16.5. As a workaround, use the ignore option to ignore non files/directories.
tar-fs has issue where extract can write outside the specified dir with a specific tarball
tar-fs provides filesystem bindings for tar-stream. Versions prior to ...
tar-fs can extract outside the specified dir with a specific tarball
EPSS