tocsin

Debian/libsixel: medium 6.5

load_png in loader.c in libsixel.a in libsixel 1.8.6 has an uninitialized pointer leading to an invalid call to free, which can cause a denial of service.

Action: Upgrade libsixel to 1.10.3-1 or later.

Affected

introducedfixedlast affected
01.10.3-1-

Fixed versions

1.10.3-1

Sources

published · modified · JSON