tocsin

Debian/karchive: high 7.5

Directory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows remote attackers to write to arbitrary files via a ../ (dot dot slash) in a filename in an archive file, re

Action: Upgrade karchive to 5.24.0-1 or later.

Affected

introducedfixedlast affected
05.24.0-1-

Fixed versions

5.24.0-1

Sources

published · modified · JSON