Vulnerability Bulletins |
DSA-3801 ruby-zip - security update |
|
| Affected software | Debian |
|
It was discovered that ruby-zip, a Ruby module for reading and writingzip files, is prone to a directory traversal vulnerability. An attackercan take advantage of this flaw to overwrite arbitrary files duringarchive extraction via a .. (dot dot) in an extracted filename. More info: https://www.debian.org/security/2017/dsa-3801 |
|