Bugzilla – Bug 1099280
VUL-0: CVE-2018-1000544: rubygem-rubyzip: Directory traversal in Zip::File component
Last modified: 2020-04-28 16:15:10 UTC
rh#1595625 rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be exploitable via If a site allows uploading of .zip files , an attacker can upload a malicious file that contains symlinks or files with absolute pathnames "../" to write arbitrary files to the filesystem.. References: https://bugzilla.redhat.com/show_bug.cgi?id=1595625 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000544 https://github.com/rubyzip/rubyzip/issues/369
Note rubygem-rubyzip is used by vagrant so probably affects that one. Patches: https://github.com/rubyzip/rubyzip/commit/6e0d23178a39f1b9ee0debc4fffb6d90994c6955 https://github.com/rubyzip/rubyzip/commit/8e78311d670ba70476fb46062c988849a82d1e02 https://github.com/rubyzip/rubyzip/compare/v1.2.1...v1.2.2
Fixed.