Alerts This Week
Warning Icon 1 989
Alerts This Week
Warning Icon 1 989

Debian Bullseye: DSA-5652-1 Critical Issue in Py7zr Directory Traversal

debian
Calendar Grey April 2, 2024
Debian Logo
Update the py7zr package on Debian Bullseye to fix the directory traversal vulnerability cited in advisory DSA-5652-1 for system integrity and security
A directory traversal vulnerability was discovered in py7zr, a library and command-line utility to process 7zip archives

Summary

A directory traversal vulnerability was discovered in py7zr, a library
and command-line utility to process 7zip archives.

For the oldstable distribution (bullseye), this problem has been fixed
in version 0.11.3+dfsg-1+deb11u1.

We recommend that you upgrade your py7zr packages.

For the detailed security status of py7zr please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/py7zr

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: py7zr
CVE ID: CVE-2022-44900

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here