p7zip 9.20.1 allows remote attackers to write to arbitrary files via a symlink attack in an archive.
{ "urgency": "not yet assigned" }