Stay Secure with the Latest Linux Advisories

security advisoryFedoradirectory traversal

Fedora 23: p7zip Update - High Critical Fix for Directory Traversal

Fix CVE-2015-1038 (#1179505). -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-fadaa9953e 2015-12-05 23:28:48.800891 -------------------------------------------------------------------------------- Name : p7zip Product : Fedora 23 Version : 15.09 Release : 4.fc23 URL : Summary : Very high compression ratio file archiver Description : p7zip is a port of 7za.exe for Unix. 7-Zip is a file archiver with a very high compression ratio. The original version can be found at https://7-zip.org/. -------------------------------------------------------------------------------- Update Information: Fix CVE-2015-1038 (#1179505) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1179505 - CVE-2015-1038 p7zip: directory traversal vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=1179505 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update p7zip' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/ . Resolution for directory traversal vulnerability in p7zip within Fedora 23, effectively mitigates CVE-2015-1038 while ensuring system integrity.. Fedora Security, p7zip Update, High Compression, Security Fix. . Severity: Critical. LinuxSecurity.com Team

Dec 06, 2015 •Critical Fedora