USN-4707-1: TCMU vulnerability
28 January 2021
tcmu could be made to crash if it received specially crafted input.
- tcmu - TCM-Userspace backend
It was discovered that TCMU lacked a check for transport-layer restrictions,
allowing remote attackers to read or write files via directory traversal in
an XCOPY request.
The problem can be corrected by updating your system to the following package versions:
In general, a standard system update will make all the necessary changes.