Alpine/chicken: critical 9.8
egg-compile.scm in CHICKEN 5.x before 5.3.1 allows arbitrary OS command execution during package installation via escape characters in a .egg file.
Action: Upgrade chicken to 5.3.0-r3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0 | 5.3.0-r3 | - |
Fixed versions
| 5.3.0-r3 |
Sources
- osv: ALPINE-CVE-2022-45145#Alpine:v3.20/chicken
- https://security.alpinelinux.org/vuln/CVE-2022-45145
published · modified · JSON