https://security-tracker.debian.org/tracker/DSA-6440-1
go-used-util has commonly used utility functions for Go. Versions prior to 0.0.34 have a ZipSlip issue when using fsutil package to unzip files. When users use `zip.Unzip` to unzip zip files from a malicious attacker, they may be vulnerable to path traversal. The issue has been fixed in version 0.0.34. There are no known workarounds.
sbt is a build tool for Scala, Java, and others. Given a specially crafted zip or JAR file, `IO.unzip` allows writing of arbitrary file. This would have potential to overwrite `/root/.ssh/authorized_keys`. Within sbt's main code, `IO.unzip` is used in `pullRemoteCache` task and `Resolvers.remote`; however many projects use `IO.unzip(...)` directly to implement custom tasks. This vulnerability has been patched in version 1.9.7.
Габариты (вхшхг) (см): 4.4х59х52 Тип конфорок: индукционный Тип управления: сенсорный Зона расширения: нет Таймер: есть Защитная блокировка (защита от детей): есть Страна-производитель: Румыния Гарантия: 1 год Встраиваемая электрическая варочная панель Electrolux IPE 6440 KF в наличии Цена: 28990.00 ₽ КУПИТЬ