Alpine/pacman: high 8.8
pacman before 5.1.3 allows directory traversal when installing a remote package via a specified URL "pacman -U <url>" due to an unsanitized file name received from a Content-Disposition header. pacman
Action: Upgrade pacman to 5.1.3-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.1.3-r0 | - |
Fixed versions
| 5.1.3-r0 |
Sources
published · modified · JSON