Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 564
Alerts This Week
Warning Icon 1 564

SUSE: 2018:2385-1 Moderate: perl-Archive-Zip Directory Traversal Risk

suse
Calendar Grey August 16, 2018
Scroller Suse
SUSE Security Patch for perl-Archive-Zip: Critical update addressing directory traversal vulnerability. Click for more information.
An update that fixes one vulnerability is now available

Summary

This update for perl-Archive-Zip fixes the following security issue: - CVE-2018-10860: Prevent directory traversal caused by not properly sanitizing paths while extracting zip files. An attacker able to provide a specially crafted archive for processing could have used this flaw to write or overwrite arbitrary files in the context of the perl interpreter (bsc#1099497) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 12-SP3: zypper in -t patch SUSE-SLE-SERVER-12-SP3-2018-1641=1 - SUSE Linux Enterprise Desktop 12-SP3: zypper in -t patch SUSE-SLE-DESKTOP-12-SP3-2018-1641=1 Package List:

Topics%20covered

Topics Covered

security advisory moderate directory traversal suse linux perl-archive-zip

References

#1099497

Cross- CVE-2018-10860

Affected Products:

SUSE Linux Enterprise Server 12-SP3

SUSE Linux Enterprise Desktop 12-SP3

https://www.suse.com/security/cve/CVE-2018-10860.html

https://bugzilla.suse.com/1099497

Announcement ID: SUSE-SU-2018:2385-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate directory traversal suse linux perl-archive-zip

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.