2020-08-03 22:15:00 2020-08-24 23:15:00

In kerfuffle/jobs.cpp in KDE Ark before 20.08.0, a crafted archive can install files outside the extraction directory via ../ directory traversal.