Debian/nncp: medium 6.4
nncp before 8.12.0 allows path traversal (for reading or writing) during freqing and file saving via a crafted path in packet data.
Action: Upgrade nncp to 8.11.0-4+deb13u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 8.11.0-4+deb13u1 | - |
Fixed versions
| 8.11.0-4+deb13u1 |
Sources
- osv: DEBIAN-CVE-2025-60020#Debian:13/nncp
- https://security-tracker.debian.org/tracker/CVE-2025-60020
published · modified · JSON