| Package | Affected versions | Patched versions |
|---|---|---|
| libarchive | ≤ 3.2.0 | |
| openshift | = 3.1= 3.2 |
The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a crafted archive file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free