ark
Link | package | bugs open | bugs closed | Wiki | GitHub | web search |
Description | Archiving Tool |
Version | 24.08.2-1 [extra] |
Resolved
Group | Affected | Fixed | Severity | Status | Ticket |
---|---|---|---|---|---|
AVG-1216 | 20.08.0-1 | 20.08.0-2 | High | Fixed | |
AVG-130 | 16.12.0-1 | 16.12.1-1 | High | Fixed |
Issue | Group | Severity | Remote | Type | Description |
---|---|---|---|---|---|
CVE-2020-24654 | AVG-1216 | High | No | Arbitrary filesystem access | In KDE Ark before 20.08.1, a crafted TAR archive with symlinks can install files outside the extraction directory, as demonstrated by a write operation to a... |
CVE-2017-5330 | AVG-130 | High | No | Arbitrary command execution | Opening an url with ark will call KRUN::runURL() which detects the mime-type of the url and runs the appropriate service for that mimetype when found. This... |
Advisories
Date | Advisory | Group | Severity | Type |
---|---|---|---|---|
03 Sep 2020 | ASA-202009-2 | AVG-1216 | High | arbitrary filesystem access |
13 Jan 2017 | ASA-201701-18 | AVG-130 | High | arbitrary command execution |