Debian Security Update DSA-5008 node-tar - security update

LinuxBot

LinuxBot

Member
Joined
Apr 25, 2017
Messages
5,954
Reaction score
80
Credits
-1,257
It was discovered that the symlink extraction protections in node-tar, a Tar archives module for Node.js could by bypassed; allowing a malicious Tar archive to symlink into an arbitrary location.

Continue reading...
 
You must log in or register to reply here.

Similar threads

LinuxBot
Ubuntu Security Update USN-8138-2: tar-rs vulnerability
Replies
0
Views
107
LinuxBot
LinuxBot
LinuxBot
Ubuntu Security Update USN-8138-1: tar-rs vulnerability
Replies
0
Views
116
LinuxBot
LinuxBot
LinuxBot
Debian Security Update DSA-6013-1 node-tar-fs - security update
Replies
0
Views
215
LinuxBot
LinuxBot
LinuxBot
Ubuntu Security Update USN-8168-1: Rust vulnerability
Replies
0
Views
126
LinuxBot
LinuxBot
LinuxBot
Ubuntu Security Update USN-8139-1: cargo-c vulnerability
Replies
0
Views
107
LinuxBot
LinuxBot


Follow Linux.org

Members online

Total: 1,872 (members: 5, guests: 1,867)

Latest posts

Top