Security update for pigz
SUSE Security Update: Security update for pigz
The file compression program pigz was updated to fix a directory traversal
while decompressing a file with restoring file name, which could be used
by attackers to overwrite files owned by the decompressing user.
(CVE-2015-1191)
Security Issues:
* CVE-2015-1191
| Announcement ID: | SUSE-SU-2015:0716-1 |
| Rating: | moderate |
| References: | #913627 |
| Affected Products: |
An update that fixes one vulnerability is now available. It includes one version update.
Description:
The file compression program pigz was updated to fix a directory traversal
while decompressing a file with restoring file name, which could be used
by attackers to overwrite files owned by the decompressing user.
(CVE-2015-1191)
Security Issues:
* CVE-2015-1191
Contraindications:
None
Patch Instructions:
To install this SUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:
- SUSE Studio Onsite 1.3:
zypper in -t patch slestso13-pigz=10525
To bring your system up-to-date, use "zypper patch".
Package List:
- SUSE Studio Onsite 1.3 (x86_64) [New Version: 2.1.6]:
- pigz-2.1.6-0.12.1
References:
- https://www.suse.com/security/cve/CVE-2015-1191.html
- https://bugzilla.suse.com/913627
- https://download.suse.com/patch/finder/?keywords=b52ed7a2abb92f0f98883224915079a0