{"action":"Upgrade c-blosc2 to 2.17.1+ds-1 or later.","affected":[{"fixed":"2.17.1+ds-1","introduced":"0"}],"component":"c-blosc2","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["2.17.1+ds-1"],"id":"tcs_01M5NN90C7VFD0HXC548Z1776Q","modified_at":"2026-09-01T20:05:45.366199096Z","published_at":"2025-04-04T18:15:48.263Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2025-29476","https://security-tracker.debian.org/tracker/CVE-2025-29476"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2025-29476#Debian:14/c-blosc2","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2025-29476"}],"summary":"Buffer Overflow vulnerability in compress_chunk_fuzzer with oss-fuzz on commit 16450518afddcb3139de627157208e49bfef6987 in c-blosc2 v.2.17.0 and before."}