Debian/golang-github-moby-go-archive: unknown
The tar extraction routines in moby/go-archive (Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers) do not confine filesystem operations to the destination directory. The extract
Action: Upgrade golang-github-moby-go-archive to 0.3.3-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.3-1 | - |
Fixed versions
| 0.3.3-1 |
Sources
published · modified · JSON