https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:45:05 +0000 https://cve.radiocsirt.org/vuln/cve-2026-54574 <p><strong>Affected:</strong> termux proot-distro</p> <p>proot-distro is a utility for managing proot containers. Prior to version 5.1.5, proot-distro install extracted plain tarball root filesystems through _extract_plain_tar() in proot_distro/commands/install.py and Docker layers through _apply_layer() in proot_distro/helpers/docker.py without validating archive-controlled symlink targets in member.linkname, allowing a malicious archive to plant an absolute host-path symlink and write files through it onto the host filesystem. This issue is fixed in version 5.1.5.</p> <p><strong>Affected:</strong> termux proot-distro</p> <p>proot-distro is a utility for managing proot containers. Prior to version 5.1.5, proot-distro install extracted plain tarball root filesystems through _extract_plain_tar() in proot_distro/commands/install.py and Docker layers through _apply_layer() in proot_distro/helpers/docker.py without validating archive-controlled symlink targets in member.linkname, allowing a malicious archive to plant an absolute host-path symlink and write files through it onto the host filesystem. This issue is fixed in version 5.1.5.</p> https://cve.radiocsirt.org/vuln/cve-2026-54574 https://cve.radiocsirt.org/vuln/ghsa-9xq3-3fqg-4vg7 <p><strong>Affected:</strong> PyPI: proot-distro</p> <p>**Repository:** `termux/proot-distro` **Component:** `proot_distro/commands/install.py` → `_extract_plain_tar()`; also `helpers/docker.py` → `_apply_layer()`</p> <p>---</p> <p>## Affected Versions</p> <p>| Component | Version | |---------------|------------------------------| | proot-distro | 5.0.2 (confirmed vulnerable) | | Termux app | 0.119.0-beta.3 | | Device / ABI | Samsung Galaxy A23 / aarch64 | | Python (host) | 3.13 |</p> <p>---</p> <p>## Vulnerability Description</p> <p>`proot-distro install` extracts a plain tarball rootfs by calling `_extract_plain_tar()` in `proot_distro/commands/install.py`. This function correctly rejects tar member **names** containing `..` components, but applies **no equivalent check on symlink targets** (`member.linkname`). A tar archive can therefore:</p> <p>1. Plant a symlink inside the rootfs whose target is an **absolute host path** (e.g. `/data/data/com.termux/files/home`). 2. Write a subsequent regular-file member whose path traverses through that symlink name.</p> <p>Python&#39;s `open()` follows the symlink, writing the file **on the host filesystem** at the privilege level of the Termux process — entirely during `proot-distro install`, before the container is ever run.</p> <p>The same `_extract_plain_tar` function is reachable via `proot-distro reset`, and the equivalent `_apply_layer` in `helpers/docker.py` contains the same flaw.</p> <p>---</p> <p>## Vulnerable Code</p> <p>**`proot_distro/commands/install.py`**, `_extract_plain_…</p> <p><strong>Affected:</strong> PyPI: proot-distro</p> <p>**Repository:** `termux/proot-distro` **Component:** `proot_distro/commands/install.py` → `_extract_plain_tar()`; also `helpers/docker.py` → `_apply_layer()`</p> <p>---</p> <p>## Affected Versions</p> <p>| Component | Version | |---------------|------------------------------| | proot-distro | 5.0.2 (confirmed vulnerable) | | Termux app | 0.119.0-beta.3 | | Device / ABI | Samsung Galaxy A23 / aarch64 | | Python (host) | 3.13 |</p> <p>---</p> <p>## Vulnerability Description</p> <p>`proot-distro install` extracts a plain tarball rootfs by calling `_extract_plain_tar()` in `proot_distro/commands/install.py`. This function correctly rejects tar member **names** containing `..` components, but applies **no equivalent check on symlink targets** (`member.linkname`). A tar archive can therefore:</p> <p>1. Plant a symlink inside the rootfs whose target is an **absolute host path** (e.g. `/data/data/com.termux/files/home`). 2. Write a subsequent regular-file member whose path traverses through that symlink name.</p> <p>Python&#39;s `open()` follows the symlink, writing the file **on the host filesystem** at the privilege level of the Termux process — entirely during `proot-distro install`, before the container is ever run.</p> <p>The same `_extract_plain_tar` function is reachable via `proot-distro reset`, and the equivalent `_apply_layer` in `helpers/docker.py` contains the same flaw.</p> <p>---</p> <p>## Vulnerable Code</p> <p>**`proot_distro/commands/install.py`**, `_extract_plain_…</p> https://cve.radiocsirt.org/vuln/ghsa-9xq3-3fqg-4vg7