tocsin

Debian/libtar: unknown

Multiple directory traversal vulnerabilities in the (1) tar_extract_glob and (2) tar_extract_all functions in libtar 1.2.20 and earlier allow remote attackers to overwrite arbitrary files via a .. (do

Action: Upgrade libtar to 1.2.20-2 or later.

Affected

introducedfixedlast affected
01.2.20-2-

Fixed versions

1.2.20-2

Sources

published · modified · JSON