tocsin

Debian/libarchive: medium 5.5

bsdcpio in libarchive before 3.2.0 allows remote attackers to cause a denial of service (invalid read and crash) via crafted cpio file.

Action: Upgrade libarchive to 3.2.0-2 or later.

Affected

introducedfixedlast affected
03.2.0-2-

Fixed versions

3.2.0-2

Sources

published · modified · JSON