Alerts This Week
Warning Icon 1 929
Alerts This Week
Warning Icon 1 929

Debian: DSA-4738-1 Moderate: Ark Archive Manager Path Issue

debian
Calendar Grey July 31, 2020
Debian Logo
Vulnerability discovered in Ark archive tool enables path traversal attacks; Debian users should apply updates immediately. Protect your devices today!
Dominik Penner discovered that the Ark archive manager did not sanitise extraction paths, which could result in maliciously crafted archives writing outside the extraction director...

Summary

Dominik Penner discovered that the Ark archive manager did not sanitise
extraction paths, which could result in maliciously crafted archives
writing outside the extraction directory.

For the stable distribution (buster), this problem has been fixed in
version 4:18.08.3-1+deb10u1.

We recommend that you upgrade your ark packages.

For the detailed security status of ark please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/ark

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Package: ark
CVE ID: CVE-2020-16116

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here