Bug#1010858: buster-pu: package unrar-nonfree/1:5.6.6-1+deb10u1

To: yokota <yokota.hgml@gmail.com>, 1010858@bugs.debian.org
Subject: Bug#1010858: buster-pu: package unrar-nonfree/1:5.6.6-1+deb10u1
From: "Adam D. Barratt" <adam@adam-barratt.org.uk>
Date: Fri, 05 Aug 2022 19:37:38 +0100
Message-id: <[🔎] 9502dd916d664ffdacc537de4a6e478ccde3c139.camel@adam-barratt.org.uk>
Reply-to: "Adam D. Barratt" <adam@adam-barratt.org.uk>, 1010858@bugs.debian.org
In-reply-to: <CA+0c0dXbx29_0Hg=x0x+wZUuX+UnZnRPyk8t_PJo_6kFxisCFA@mail.gmail.com>
References: <CA+0c0dXbx29_0Hg=x0x+wZUuX+UnZnRPyk8t_PJo_6kFxisCFA@mail.gmail.com> <CA+0c0dXbx29_0Hg=x0x+wZUuX+UnZnRPyk8t_PJo_6kFxisCFA@mail.gmail.com>

Control: tags -1 + confirmed

On Thu, 2022-05-12 at 02:31 +0900, yokota wrote:
> CVE-2022-30333 is directory traversal vulnerability.
> It write to files during an extract operation on outside of
> extraction
> directory.
> 

Please go ahead; sorry for the delay.

Regards,

Adam

Reply to:

Follow-Ups:
- Bug#1010858: buster-pu: package unrar-nonfree/1:5.6.6-1+deb10u1
  - From: yokota <yokota.hgml@gmail.com>

Prev by Date: Processed: Re: Bug#1010388: buster-pu: package node-ejs/2.5.7-1+deb10u1
Next by Date: Processed: Re: Bug#1011030: buster-pu: package htmldoc/1.9.3-1+deb10u4
Previous by thread: Processed: Re: Bug#1010388: buster-pu: package node-ejs/2.5.7-1+deb10u1
Next by thread: Processed: Re: Bug#1010858: buster-pu: package unrar-nonfree/1:5.6.6-1+deb10u1
Index(es):
- Date
- Thread