Debian/leptonlib: critical 9.8
An issue was discovered in Leptonica through 1.75.3. The gplotMakeOutput function allows command injection via a $(command) approach in the gplot rootname argument. This issue exists because of an inc
Action: Upgrade leptonlib to 1.75.3-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.75.3-3 | - |
Fixed versions
| 1.75.3-3 |
Sources
published · modified · JSON