tocsin

Debian/arj: unknown

Open-source ARJ archiver 3.10.22 allows remote attackers to conduct directory traversal attacks via a symlink attack in an ARJ archive.

Action: Upgrade arj to 3.10.22-13 or later.

Affected

introducedfixedlast affected
03.10.22-13-

Fixed versions

3.10.22-13

Sources

published · modified · JSON