Approved changes feed: RSS · Atom

cpe:2.3:a:progress:mixlib-archive:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorProgress (f9d80521-f73f-5a85-8df9-9306f2f67809)
ProductMixlib Archive (31a3b4b4-6e8d-5258-989d-dc270f05d2c5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/ruby-mixlib-archive purl2cpe 2026-06-01 10:16:17.260335
pkg:deb/ubuntu/ruby-mixlib-archive purl2cpe 2026-06-01 10:16:17.260338
pkg:gem/mixlib-archive purl2cpe 2026-06-01 10:16:17.260341
pkg:github/chef/mixlib-archive purl2cpe 2026-06-01 10:16:17.260344
pkg:rpm/opensuse/rubygem-mixlib-archive purl2cpe 2026-06-01 10:16:17.260346

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1000026 vulnerable 2026-06-03 14:36:19.880436 Details available
Chef Software's mixlib-archive versions 0.3.0 and older are vulnerable to a directory traversal attack allowing attackers to overwrite arbitrary files by using ".." in tar archive entries
Published: 2017-07-13T20:00:00.000Z
Updated: 2024-08-05T21:53:06.317Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.