Skip to content
OpenAdvisories

Package · Alpine

pacman

3 known vulnerabilities.

3 results · Feed

  • Unscored —

    pacman before 5.2 is vulnerable to arbitrary command injection in conf.c in the download_with_xfercommand() function. T…

  • Unscored —

    pacman before 5.2 is vulnerable to arbitrary command injection in lib/libalpm/sync.c in the apply_deltas() function. Th…

  • Unscored —

    pacman before 5.1.3 allows directory traversal when installing a remote package via a specified URL "pacman -U <url>" d…