SUSE-SU-2018:0602-1

See a problem?
Please try reporting it to the source first.

Source

Import Source

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2018:0602-1

Related

Published

2018-03-05T09:41:06Z

Modified

2018-03-05T09:41:06Z

Summary

Security update for rubygem-puppet

Details

This update for rubygem-puppet fixes the following issues:

CVE-2017-10689: Reset permissions when unpacking tar in PMT. When using minitar, files were unpacked with whatever permissions are in the tarball. This is potentially unsafe, as tarballs can be easily created with weird permissions (bsc#1080288)

References

Affected packages

Name: rubygem-puppet
Purl: pkg:rpm/suse/rubygem-puppet&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Advanced%20Systems%20Management%2012

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.8.1-32.3.1

{
    "binaries": [
        {
            "rubygem-puppet": "4.8.1-32.3.1",
            "ruby2.1-rubygem-puppet": "4.8.1-32.3.1"
        }
    ]
}