nodejs-tar Info

nodejs-tar was added to epel7 repo on 2014-07-29
Page updated: 2023-11-21 11:36
Repo Status - Overall Status

Source NVR: nodejs-tar-0.1.18-1.el7 (2014-07-29)

Binary Packages

nodejs-tar nodejs-tar-0.1.18-1.el7

Bugs

1702339 NEW CVE-2018-20834 nodejs-tar: Arbitrary file overwrites when extracting tarballs containing a hard-link [epel-all]
1993958 NEW CVE-2021-32803 nodejs-tar: Insufficient symlink protection allowing arbitrary file creation and overwrite [epel-7]
1993959 NEW CVE-2021-32804 nodejs-tar: Insufficient absolute path sanitization allowing arbitrary file creation and overwrite [epel-7]
1999738 NEW CVE-2021-37701 nodejs-tar: Insufficient symlink protection due to directory cache poisoning using symbolic links allowing arbitrary file creation and overwrite [epel-7]
1999741 NEW CVE-2021-37712 nodejs-tar: Insufficient symlink protection due to directory cache poisoning using symbolic links allowing arbitrary file creation and overwrite [epel-7]

Install Failures