tocsin

Debian/pigz: unknown

Multiple directory traversal vulnerabilities in pigz 2.3.1 allow remote attackers to write to arbitrary files via a (1) full pathname or (2) .. (dot dot) in an archive.

Action: Upgrade pigz to 2.3.1-2 or later.

Affected

introducedfixedlast affected
02.3.1-2-

Fixed versions

2.3.1-2

Sources

published · modified · JSON