xar in Apple Mac OS X 10.5.8 does not properly validate package signatures, which allows attackers to have an unspecified impact via a modified package.

- Update to 1.6.1

  - Change upstream

  - Exclude CVE-2010-0055 patch, includes in upstream

  - Exclude norpath patch, using sed

  - Pass FTBFS state #1676224

  - General clean of the spec

  - Use Fedora guide lines in Source URL

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update fixes CVE-2010-0055, an issue where xar did not properly validate package signatures, which allows attackers to have an unspecified impact via a modified package.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is running a version of Mac OS X 10.5 that does not have Security Update 2010-002 applied.

This security update contains fixes for the following products :

  - AppKit
  - Application Firewall
  - AFP Server
  - Apache
  - ClamAV
  - CoreTypes
  - CUPS
  - curl
  - Cyrus IMAP
  - Cyrus SASL
  - Disk Images
  - Directory Services
  - Event Monitor
  - FreeRADIUS
  - FTP Server
  - iChat Server
  - Image RAW
  - Libsystem
  - Mail
  - Mailman
  - OS Services
  - Password Server
  - perl
  - PHP
  - PS Normalizer
  - Ruby
  - Server Admin
  - SMB
  - Tomcat
  - unzip
  - vim
  - Wiki Server
  - X11
  - xar

ID	Name	Product	Family	Severity
133011	Fedora 31 : xar (2020-6490123c7c)	Nessus	Fedora Local Security Checks	critical
47471	Fedora 11 : xar-1.5.2-6.fc11 (2010-7670)	Nessus	Fedora Local Security Checks	critical
47466	Fedora 12 : xar-1.5.2-6.fc12 (2010-7631)	Nessus	Fedora Local Security Checks	critical
47465	Fedora 13 : xar-1.5.2-6.fc13 (2010-7613)	Nessus	Fedora Local Security Checks	critical
45373	Mac OS X Multiple Vulnerabilities (Security Update 2010-002)	Nessus	MacOS X Local Security Checks	critical

Detections

Analytics

CVE-2010-0055

critical

Tenable Plugins

critical

critical

critical

critical

critical