Ubuntu Security Notice 1276-1 - Tim Brown discovered that Ark did not properly perform input validation when previewing archive files. If a user were tricked into opening a crafted archive file, an attacker could remove files via directory traversal.
8badff12978d2b31cd896be809de12c187315b2ed4e5917ae571a4712fd9a670
Ark version 2.16 suffers from a directory traversal vulnerability when handling a malformed ZIP file.
65500fe3d0754fdf5656832e5ced430dddaaf1e71169286b94df909c93e51efa