tocsin

Debian/rar: medium 5.5

Directory Traversal exists in RAR 4.x and 5.x because an unpack operation follows any symlinks, including symlinks contained in the archive. This allows remote attackers to write to arbitrary files vi

Action: Upgrade rar to 2:5.3.b2-1 or later.

Affected

introducedfixedlast affected
02:5.3.b2-1-

Fixed versions

2:5.3.b2-1

Sources

published · modified · JSON