Hub Package Arbitrary File Overwrite

The am function in lib/hub/commands.rb in hub before 1.12.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary patch file...

CVE-2014-0177

The CVE-2014-0177 issue affects hub (Ruby gem) prior to 1.12.1, where the am function in lib/hub/commands.rb is vulnerable to a symlink attack on a temporary patch file, allowing local users to overwrite arbitrary files (integrity impact). The documented root cause is a vulnerable file-overwrite ...

CVE-2014-0177

The am function in lib/hub/commands.rb in hub before 1.12.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary patch file...