Debian/xar: critical 9.8
libxar.so in xar 1.6.1 has a NULL pointer dereference in the xar_unserialize function in archive.c.
Action: Upgrade xar to 1.8.0.498-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.8.0.498-1 | - |
Fixed versions
| 1.8.0.498-1 |
Sources
published · modified · JSON