egg-compile.scm in CHICKEN 5.x before 5.3.1 allows arbitrary OS command execution during package installation via escape characters in a .egg file.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Alpine | edge-community | noarch | chicken | < 5.3.0-r3 | UNKNOWN |
Alpine | 3.18-community | noarch | chicken | < 5.3.0-r3 | UNKNOWN |
Alpine | 3.19-community | noarch | chicken | < 5.3.0-r3 | UNKNOWN |
Alpine | 3.20-community | noarch | chicken | < 5.3.0-r3 | UNKNOWN |