Debian 11 — golang-github-hashicorp-go-slug — vulnerability — patch and remediation guide
🟢 Low ⏱ 5–15 min Last verified: 10 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-29529 Upstream summary: HashiCorp go-slug up to 0.4.3 did not fully protect against directory traversal while unpacking tar archives, and protections could be bypassed with specific constructions of […]