tocsin

Alpine/lrzip: medium 5.5

lrzip v0.641 was discovered to contain a multiple concurrency use-after-free between the functions zpaq_decompress_buf() and clear_rulist(). This vulnerability allows attackers to cause a Denial of Se

Action: Upgrade lrzip to 0.650-r0 or later.

Affected

introducedfixedlast affected
00.650-r0-

Fixed versions

0.650-r0

Sources

published · modified · JSON