tocsin

Debian/netatalk: high 7.5

A logic error involving bitwise OR operations in Netatalk 3.1.4 through 4.4.2 allows a remote authenticated attacker to inject OS commands and execute arbitrary code.

Action: Upgrade netatalk to 4.2.3~ds-1+deb13u2 or later.

Affected

introducedfixedlast affected
04.2.3~ds-1+deb13u2-

Fixed versions

4.2.3~ds-1+deb13u2

Sources

published · modified · JSON