==========================================================================
Ubuntu Security Notice USN-4123-1
September 05, 2019

npm/fstream vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 19.04
– Ubuntu 18.04 LTS

Summary:

npm/fstream could be made to overwrite files.

Software Description:
– node-fstream: Advanced filesystem streaming tools for Node.js

Details:

It was discovered that npm/fstream incorrectly handled certain crafted
tarballs. An attacker could use this vulnerability to write aritrary files to
the filesystem.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.04:
node-fstream 1.0.10-1ubuntu0.19.04.2

Ubuntu 18.04 LTS:
node-fstream 1.0.10-1ubuntu0.18.04.1

In general, a standard system update will make all the necessary changes.

References:
https://usn.ubuntu.com/4123-1
CVE-2019-13173

Package Information:
https://launchpad.net/ubuntu/+source/node-fstream/1.0.10-1ubuntu0.19.04.2
https://launchpad.net/ubuntu/+source/node-fstream/1.0.10-1ubuntu0.18.04.1

—–BEGIN PGP SIGNATURE—–
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=71Bz
—–END PGP SIGNATURE—–
—