Package: lrzip / 0.641-1+deb11u1

Metadata

Package Version Patches format
lrzip 0.641-1+deb11u1 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
CVE 2018 5786.patch | (download)

lrzip.c | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 [patch] check for invalid repeated head that can lead to infinite
 loop in info mode.

CVE 2022 26291.patch | (download)

lrzip.c | 8 7 + 1 - 0 !
runzip.c | 6 1 + 5 - 0 !
runzip.h | 1 1 + 0 - 0 !
3 files changed, 9 insertions(+), 6 deletions(-)

 fix possible race condition between zpaq_decompress_buf() and
 clear_rulist() function as reported by wcventure.

CVE 2022 28044.patch | (download)

lrzip.c | 2 1 + 1 - 0 !
main.c | 6 4 + 2 - 0 !
2 files changed, 5 insertions(+), 3 deletions(-)

 fix control->suffix being deallocated as heap memory as reported by
 Pietro Borrello.