{"affected":[{"ecosystem_specific":{"binaries":[{"ruby2.1-rubygem-puppet":"4.8.1-32.3.1","rubygem-puppet":"4.8.1-32.3.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Module for Advanced Systems Management 12","name":"rubygem-puppet","purl":"purl:rpm/suse/rubygem-puppet&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Advanced%20Systems%20Management%2012"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.8.1-32.3.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for rubygem-puppet fixes the following issues:\n\n- CVE-2017-10689: Reset permissions when unpacking tar in PMT.\n  When using minitar, files were unpacked with whatever permissions are\n  in the tarball. This is potentially unsafe, as tarballs can be easily\n  created with weird permissions\n  (bsc#1080288)\n","id":"SUSE-SU-2018:0602-1","modified":"2018-03-05T09:41:06Z","published":"2018-03-05T09:41:06Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180602-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1080288"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-10689"}],"related":["CVE-2017-10689"],"summary":"Security update for rubygem-puppet"}