Bug#850874: ark: CVE-2017-5330: Unintended execution of scripts and executable files

2017-01-11 Thread Salvatore Bonaccorso
Hi For jessie: I think the issue was only introduce after the "Open File" action was introduced, which is post 15.11.80. Would be great if you can confirm that. Regards, Salvatore

Bug#850874: ark: CVE-2017-5330: Unintended execution of scripts and executable files

2017-01-10 Thread Salvatore Bonaccorso
Source: ark Version: 4:16.08.3-1 Severity: grave Tags: upstream patch security fixed-upstream Justification: user security hole Forwarded: https://bugs.kde.org/show_bug.cgi?id=374572 Hi, the following vulnerability was published for ark. CVE-2017-5330[0]: unintended execution of scripts and