CVE:CVE-2022-3560
CNNVD:CNNVD-202301-2439
pesign是PE-COFF 二进制文件的签名工具，希望至少模糊地符合PE和Authenticode 规范。
pesign 存在安全漏洞。攻击者利用该漏洞通过路径遍历攻击访问特权文件和目录。
solution:Upgrade pesign_project pesign to a higher version than 116,and avoid the version (,116); Upgrade fedoraproject fedora to a higher version than 36,37,and avoid the version 36,37; Upgrade redhat enterprise_linux to a higher version than 7.0,8.0,9.0,and avoid the version 7.0,8.0,9.0