CVE-2017-14804

Name of the Vulnerable Software and Affected Versions: build package versions prior to 20171128

Description: The issue allows untrusted builds to write outside of the target system, enabling escape out of buildroots, due to a lack of directory name checks during the extraction of build results.

Recommendations: For versions prior to 20171128, update to a version that includes the fix for this issue to prevent untrusted builds from writing outside the target system.