tocsin

Debian/python3.11: unknown

bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompress

Action: Upgrade python3.11 to 3.11.2-6+deb12u9 or later.

Affected

introducedfixedlast affected
03.11.2-6+deb12u9-

Fixed versions

3.11.2-6+deb12u9

Sources

published · modified · JSON