EUVD-2018-0032

Malware in sbrugna...

Fedora 41 : diffoscope (2024-b5bcfc7475)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-b5bcfc7475 advisory. Automatic update for diffoscope-257-1.fc41. Changelog Sun Feb 18 2024 Zbigniew Jdrzejewski-Szmek - 257-1 - Version 257 - Fixes rhbz2264736, CVE-2024-25711...

SUSE CVE-2024-25711

diffoscope before 256 allows directory traversal via an embedded filename in a GPG file. Contents of any file, such as ../.ssh/idrsa, may be disclosed to an attacker. This occurs because the value of the gpg --use-embedded-filenames option is trusted...

Directory Traversal

diffoscope is vulnerable to Directory Traversal. The vulnerability is due to the trusted value of the gpg --use-embedded-filenames option,which can be exploited by an attacker to disclose contents of arbitrary files, such as ../.ssh/idrsa...

CVE-2017-0359

diffoscope before 77 writes to arbitrary locations on disk based on the contents of an untrusted archive...