From 6d1c07e7cf10d5e4effcd5ac2601af5595be2a6a Mon Sep 17 00:00:00 2001 From: ggkitsas Date: Tue, 7 Jul 2020 11:44:20 +0100 Subject: [PATCH] Adds software and versions in the description --- 2020/7xxx/CVE-2020-7667.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/2020/7xxx/CVE-2020-7667.json b/2020/7xxx/CVE-2020-7667.json index eb8cc29a814..7f006863549 100644 --- a/2020/7xxx/CVE-2020-7667.json +++ b/2020/7xxx/CVE-2020-7667.json @@ -63,7 +63,7 @@ "description_data": [ { "lang": "eng", - "value": "The CPIO extraction functionality doesn't sanitize the paths of the archived files for leading and non-leading \"..\" which leads in file extraction outside of the current directory. Note: the fixing commit was applied to all affected versions which were re-released." + "value": "In package github.com/sassoftware/go-rpmutils/cpio before version 0.1.0, the CPIO extraction functionality doesn't sanitize the paths of the archived files for leading and non-leading \"..\" which leads in file extraction outside of the current directory. Note: the fixing commit was applied to all affected versions which were re-released." } ] }, @@ -89,4 +89,4 @@ "value": "Georgios Gkitsas of Snyk Security Team" } ] -} \ No newline at end of file +}