tocsin

Debian/fastjar: unknown

Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a full pathname for a file within a .j

Action: Upgrade fastjar to 2:0.98-3 or later.

Affected

introducedfixedlast affected
02:0.98-3-

Fixed versions

2:0.98-3

Sources

published · modified · JSON