tocsin

Debian/ohcount: critical 9.8

Ohcount 3.0.0 is prone to a command injection via specially crafted filenames containing shell metacharacters, which can be exploited by an attacker (providing a source tree for Ohcount processing) to

Action: Upgrade ohcount to 3.1.0-1 or later.

Affected

introducedfixedlast affected
03.1.0-1-

Fixed versions

3.1.0-1

Sources

published · modified · JSON