tocsin

Debian/golang-github-appc-docker2aci: medium 5.5

Directory traversal vulnerability in docker2aci before 0.13.0 allows remote attackers to write to arbitrary files via a .. (dot dot) in the embedded layer data in an image.

Action: Upgrade golang-github-appc-docker2aci to 0.14.0+dfsg-1 or later.

Affected

introducedfixedlast affected
00.14.0+dfsg-1-

Fixed versions

0.14.0+dfsg-1

Sources

published · modified · JSON