Description
Tahoe-LAFS 1.9.0 fails to ensure integrity which allows remote attackers to corrupt mutable files or directories upon retrieval.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| tahoe-lafs | tahoe-lafs | 1.10.0-2 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | tahoe-lafs | 1.9.0 | — | GHSA-v62p-cjv8-35xh |
References
- https://security-tracker.debian.org/tracker/CVE-2012-0051
- http://www.openwall.com/lists/oss-security/2012/01/15/11
- http://www.openwall.com/lists/oss-security/2012/01/26/7
- http://www.openwall.com/lists/oss-security/2012/01/26/8
- http://www.openwall.com/lists/oss-security/2012/01/26/9
- https://tahoe-lafs.org/trac/tahoe-lafs/ticket/1654