tocsin

Debian/libarchive: low 3.9

A flaw was found in libarchive. This vulnerability allows a remote attacker to trigger a heap overflow by providing a specially crafted tar archive. The issue occurs during the parsing of a PAX extend

Action: Upgrade libarchive to 3.6.2-1+deb12u5 or later.

Affected

introducedfixedlast affected
03.6.2-1+deb12u5-

Fixed versions

3.6.2-1+deb12u5

Sources

published · modified · JSON