Debian/rar: high 7.5
RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~/.ssh/authorized_keys file. NOTE: WinRA
Action: Upgrade rar to 2:6.20~b1-0.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2:6.20~b1-0.1 | - |
Fixed versions
| 2:6.20~b1-0.1 |
Sources
published · modified · JSON