Debian/libarchive: unknown

archive_read_support_format_tar.c in libarchive before 2.2.4 does not properly compute the length of a certain buffer when processing a malformed pax extension header, which allows user-assisted remot

Action: Upgrade libarchive to 2.2.4-1 or later.