Description
An issue in Franco Corbelli ZPAQFRANZ v.61.3 and before allows a remote attacker to escalate privileges and execute arbitrary code via a bypass of the Mark-of-the-Web protection mechanism
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | zpaqfranz | No fix yet | — |
| Ubuntu 26.04 LTS | zpaqfranz | No fix yet | — |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | zpaqfranz | 64.8-1.1 | openSUSE-SU-2026:11483-1 |
Advisories 1
- openSUSE-SU-2026:11483-1 zpaqfranz-64.8-1.1 on GA media SUSE / openSUSE Security Updates · Aug 10, 2026