[Bug 1712948] Re: [CVE] KNewstuff downloads can install files outside the extraction directory

Launchpad Bug Tracker 1712948 at bugs.launchpad.net
Fri Sep 8 01:00:42 UTC 2017


This bug was fixed in the package karchive - 5.18.0-0ubuntu1.1

---------------
karchive (5.18.0-0ubuntu1.1) xenial-security; urgency=medium

  * SECURITY UPDATE: KNewstuff downloads can install files outside the
    extraction directory (LP: #1712948)
    - fix-CVE-2016-6232.patch
    - CVE-2016-6232

 -- Simon Quigley <tsimonq2 at ubuntu.com>  Sat, 02 Sep 2017 01:06:58 -0500

** Changed in: karchive (Ubuntu Xenial)
       Status: Confirmed => Fix Released

-- 
You received this bug notification because you are a member of Kubuntu
Bugs, which is subscribed to karchive in Ubuntu.
https://bugs.launchpad.net/bugs/1712948

Title:
  [CVE] KNewstuff downloads can install files outside the extraction
  directory

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/karchive/+bug/1712948/+subscriptions




More information about the kubuntu-bugs mailing list