Skip to content
OpenAdvisories

Package · Debian

borgbackup2

1 known vulnerabilities.

1 result · Feed

  • Medium 5.3

    borg extract might modify out-of-tree files when extracting maliciously crafted archives

    borgbackup is an opensource, deduplicating archiver with compression and authenticated encryption. Prior to 1.4.5 and 2.0.0b22, extracting a malicious archive can follow a symlinked parent path or resolve embedded dot-dot path components and delete or overwri…