Debian Security Update DSA-5008 node-tar - security update

LinuxBot

LinuxBot

Member
Joined
Apr 25, 2017
Messages
6,817
Reaction score
94
Credits
-1,257
It was discovered that the symlink extraction protections in node-tar, a Tar archives module for Node.js could by bypassed; allowing a malicious Tar archive to symlink into an arbitrary location.

Continue reading...
 
You must log in or register to reply here.

Similar threads

LinuxBot
Ubuntu Security Update USN-8367-1: tar-fs vulnerabilities
Replies
0
Views
108
LinuxBot
LinuxBot
LinuxBot
Ubuntu Security Update USN-8138-2: tar-rs vulnerability
Replies
0
Views
114
LinuxBot
LinuxBot
LinuxBot
Ubuntu Security Update USN-8138-1: tar-rs vulnerability
Replies
0
Views
120
LinuxBot
LinuxBot
LinuxBot
Debian Security Update DSA-6013-1 node-tar-fs - security update
Replies
0
Views
219
LinuxBot
LinuxBot
LinuxBot
Ubuntu Security Update USN-8168-1: Rust vulnerability
Replies
0
Views
133
LinuxBot
LinuxBot


Follow Linux.org

Staff online

Members online

Total: 1,228 (members: 13, guests: 1,215)

Latest posts

Top