Skip to content
OpenAdvisories

Package · Ubuntu

patool

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.4
    CVE-2026-124584

    wummel patool Gzip Extraction fileutil.py extract_gzip symlink

    A vulnerability has been found in wummel patool 4.1.0. This vulnerability affects the function extract_gzip of the file patoolib/fileutil.py of the component Gzip Extraction Handler. The manipulation leads to symlink following. Local access is required to app…

    wummel patool patool patool Debian Ubuntu
  • Medium 5.4
    CVE-2026-29509

    Patool < 4.0.5 Path Traversal via safe_extract() Function

    Patool before 4.0.5 contains a path traversal vulnerability in the safe_extract() function in patoolib/programs/py_tarfile.py when running on Python before 3.12, where the is_within_directory() helper uses os.path.commonprefix() for character-level string com…

    wummel patool patool patool Debian Ubuntu