tocsin

Debian/golang-1.15: high 7.5

In archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header (falsely designating that many files are present) can cause a NewReader or OpenReader panic. NOTE: this issue exis

Action: Upgrade golang-1.15 to 1.15.15-1~deb11u1 or later.

Affected

introducedfixedlast affected
01.15.15-1~deb11u1-

Fixed versions

1.15.15-1~deb11u1

Sources

published · modified · JSON