nodejs-tar was added to epel7 repo on 2014-07-29
Page updated: 2023-11-21 11:36
Repo Status -
Overall Status
Source NVR: nodejs-tar-0.1.18-1.el7 (2014-07-29)
nodejs-tar | nodejs-tar-0.1.18-1.el7 |
1702339 | NEW | CVE-2018-20834 nodejs-tar: Arbitrary file overwrites when extracting tarballs containing a hard-link [epel-all] |
1993958 | NEW | CVE-2021-32803 nodejs-tar: Insufficient symlink protection allowing arbitrary file creation and overwrite [epel-7] |
1993959 | NEW | CVE-2021-32804 nodejs-tar: Insufficient absolute path sanitization allowing arbitrary file creation and overwrite [epel-7] |
1999738 | NEW | CVE-2021-37701 nodejs-tar: Insufficient symlink protection due to directory cache poisoning using symbolic links allowing arbitrary file creation and overwrite [epel-7] |
1999741 | NEW | CVE-2021-37712 nodejs-tar: Insufficient symlink protection due to directory cache poisoning using symbolic links allowing arbitrary file creation and overwrite [epel-7] |