tocsin

Debian/libarchive: medium 6.5

A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, caused by improper validation of a field (`pz_log2_bs`) read from ISO9660 Rock Ridge exten

Action: Upgrade libarchive to 3.6.2-1+deb12u4 or later.

Affected

introducedfixedlast affected
03.6.2-1+deb12u4-

Fixed versions

3.6.2-1+deb12u4

Sources

published · modified · JSON