tocsin

Debian/libarchive: medium 6.5

bsdtar in libarchive before 3.2.0 returns a success code without filling the entry when the header is a "split file in multivolume RAR," which allows remote attackers to cause a denial of service (NUL

Action: Upgrade libarchive to 3.2.0-2 or later.

Affected

introducedfixedlast affected
03.2.0-2-

Fixed versions

3.2.0-2

Sources

published · modified · JSON