Fix directory traversal in pdfdetach (!1419) · Merge requests · poppler / poppler · GitLab

Due to an influx of spam, we have had to impose restrictions on new accounts. Please see this wiki page for instructions on how to get full permissions. Sorry for the inconvenience.

Open Sune Vuorela requested to merge svuorela/poppler:svuorela/directory-traversal-pdf-detach into master Jun 30, 2023

A carefully crafted pdf file could lead to writing files in wrong places of the file system by using pdfdetach.

Thanks to jwilk for spotting the issue.

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1026908