CVE-2024-27629

An issue in dc2niix before v.1.0.20240202 allows a local attacker to
execute arbitrary code via the generated file name is not properly escaped
and injected into a system call when certain types of compression are used.

Bugs

• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1074534&gt;