| Package | Affected versions | Patched versions |
|---|---|---|
| dpkg | ≥ 1.14.17, < 1.18.26≥ 1.19.0, < 1.19.8≥ 1.20.0, < 1.20.10≥ 1.21.0, < 1.21.8 | 1.18.261.19.81.20.101.21.8 |
Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-place extraction can lead to directory traversal situations on specially crafted orig.tar and debian.tar tarballs.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free