Description
In OpenBSD 7.5 before errata 009 and OpenBSD 7.4 before errata 022, exclude any '/' in readdir name validation to avoid unexpected directory traversal on untrusted file systems.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenBSD | OpenBSD | 7.5 – < 7.5 errata 009, 7.4 – < 7.4 errata 022 | 7.5 errata 009 |
Advisories 1
- WID-SEC-2024-3620 OpenBSD: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 5, 2024