Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 557
Alerts This Week
Warning Icon 1 557

Ubuntu 19.04 and 18.04 LTS: USN-4123-1 Critical: npm/fstream Issue

ubuntu
Calendar Grey September 5, 2019
Dist Ubuntu Esm H88
Ubuntu Security Advisory USN-4124-1 outlines a severe vulnerability in npm/tar that permits unauthorized file access.
npm/fstream could be made to overwrite files.

Summary

npm/fstream could be made to overwrite files.

Software Description:

- node-fstream: Advanced filesystem streaming tools for Node.js

Details:

It was discovered that npm/fstream incorrectly handled certain crafted

tarballs. An attacker could use this vulnerability to write aritrary files to

the filesystem.

Topics%20covered

Topics Covered

security advisory software update Ubuntu file access overwrite issue npm fstream

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.04:
  node-fstream                    1.0.10-1ubuntu0.19.04.2

Ubuntu 18.04 LTS:
  node-fstream                    1.0.10-1ubuntu0.18.04.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4123-1

CVE-2019-13173

Severity
critical
Lowest
Low
Medium
High
Critical

September 05, 2019

Topics%20covered

Topics Covered

security advisory software update Ubuntu file access overwrite issue npm fstream

Package Information

https://launchpad.net/ubuntu/+source/node-fstream/1.0.10-1ubuntu0.19.04.2
https://launchpad.net/ubuntu/+source/node-fstream/1.0.10-1ubuntu0.18.04.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.