tocsin

Debian/libarchive: medium 5.5

The copy_from_lzss_window function in archive_read_support_format_rar.c in libarchive 3.2.0 and earlier allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted rar

Action: Upgrade libarchive to 3.2.1-1 or later.

Affected

introducedfixedlast affected
03.2.1-1-

Fixed versions

3.2.1-1

Sources

published · modified · JSON