tocsin

Alpine/go: high 7.5

In archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header (falsely designating that many files are present) can cause a NewReader or OpenReader panic. NOTE: this issue exis

Action: Upgrade go to 1.17.1-r0 or later.

Affected

introducedfixedlast affected
1.17.01.17.1-r0-

Fixed versions

1.17.1-r0

Sources

published · modified · JSON