tocsin

Debian/golang-1.19: high 7.5

Uncontrolled recursion in Reader.Read in compress/gzip before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via an archive containing a large number of concatena

Action: Upgrade golang-1.19 to 1.19~rc2-1 or later.

Affected

introducedfixedlast affected
01.19~rc2-1-

Fixed versions

1.19~rc2-1

Sources

published · modified · JSON