Description
diffoscope Path Traversal vulnerability
diffoscope before 256 allows directory traversal via an embedded filename in a GPG file. Contents of any file, such as ../.ssh/id_rsa, may be disclosed to an attacker. This occurs because the value of the gpg --use-embedded-filenames option is trusted.
Mitigation
Minimal update. May introduce new vulnerabilities or breaking changes.
|
 pypi | | | 256 |
 debian 11 | | =177 || =178 || =179 || =180 || =180~bpo11+1 || =181 || =182 || =183 || =184 || =185 || =185~bpo11+1 || =186 || =186~bpo11+1 || =187 || =187~bpo11+1 || =188 || =188~bpo11+1 || =189 || =189~bpo11+1 || =190 || =191 || =192 || =193 || =194 || =194~bpo11+1 || =195 || =196 || =196~bpo11+1 || =197 || =198 || =199 || =199~bpo11+1 || =200 || =200~bpo11+1 || =201 || =201~bpo11+1 || =202 || =203 || =204 || =205 || =206 || =206~bpo11+1 || =207 || =208 || =209 || =210 || =211 || =211~bpo11+1 || =212 || =213 || =214 || =215 || =216 || =217 || =218 || =219 || =220 || =221 || =221~bpo11+1 || =222 || =223 || =224 || =225 || =226 || =227 || =228 || =229 || =230 || =231 || =232 || =233 || =234 || =235 || =236 || =237 || =238 || =238~bpo11+1 || =239 || =240 || =241 || =242 || =243 || =244 || =245 || =246 || =247 || =248 || =249 || =250 || =251 || =252 || =253 || =254 || =255 || =256 || =257 || =258 || =259 || =260 || =261 || =262 || =263 || =264 || =265 || =266 || =267 || =268 || =269 || =270 || =271 || =272 || =273 || =274 || =275 || =276 || =277 || =278 || =279 || =280 || =281 || =282 || =283 || =284 || =285 || =286 || =287 || =288 || =289 || =290 || =291 || =292 || =293 || =294 || =295 || =296 || =297 || =298 || =299 || =300 || =301 || =302 || =303 || =304 || =305 || =306 || =306~bpo13+1 || =307 || =308 || =309 || =310 || =311 || =312 || =313 || =314 || =315 || =316 || =317 | - |
debian 12 | | =240 || =240+deb12u1 || =241 || =242 || =243 || =244 || =245 || =246 || =247 || =248 || =249 || =250 || =251 || =252 || =253 || =254 || =255 || =256 || =257 || =258 || =259 || =260 || =261 || =262 || =263 || =264 || =265 || =266 || =267 || =268 || =269 || =270 || =271 || =272 || =273 || =274 || =275 || =276 || =277 || =278 || =279 || =280 || =281 || =282 || =283 || =284 || =285 || =286 || =287 || =288 || =289 || =290 || =291 || =292 || =293 || =294 || =295 || =296 || =297 || =298 || =299 || =300 || =301 || =302 || =303 || =304 || =305 || =306 || =306~bpo13+1 || =307 || =308 || =309 || =310 || =311 || =312 || =313 || =314 || =315 || =316 || =317 | - |
debian 13 | | | 256 |
debian 14 | | | 256 |
