[SECURITY] [DLA 3015-1] ark security update

🗓️ 20 May 2022 12:06:00Reported by DebianType

Ark archive manager security update fixing path extraction vulnerabilit

Reporter	Title	Published	Views	Family All 94
FreeBSD	ark -- extraction outside of extraction directory	27 Aug 202000:00	–	freebsd
FreeBSD	ark -- directory traversal	30 Jul 202000:00	–	freebsd
AlpineLinux	CVE-2020-16116	3 Aug 202019:34	–	alpinelinux
AlpineLinux	CVE-2020-24654	2 Sep 202016:22	–	alpinelinux
ArchLinux	[ASA-202009-2] ark: arbitrary filesystem access	3 Sep 202000:00	–	archlinux
BDU FSTEC	The vulnerability in the `emitEntryFromArchiveEntry` function in the `libarchiveplugin.cpp` of the Ark archiver, related to incorrect definition of references before accessing the file, allows a attacker to compromise data integrity.	30 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Job::onEntry function in the jobs.cpp file of the Ark archive viewer is related to deficiencies in the pathname restriction mechanism for the directory. This vulnerability allows an attacker to compromise the integrity of the protected information.	15 Jul 202100:00	–	bdu_fstec
CNVD	KDE Ark Directory Traversal Vulnerability	4 Aug 202000:00	–	cnvd
CVE	CVE-2020-16116	3 Aug 202019:34	–	cve
CVE	CVE-2020-24654	2 Sep 202016:22	–	cve