Debian Patches
Status for libmspack/0.11-2
| Patch | Description | Author | Forwarded | Bugs | Origin | Last update |
|---|---|---|---|---|---|---|
| CVE-2026-110602.patch | fix for CVE-2026-110602 adapted for the version in Debian (based on commit 4d868504114346aa767d435fbb89a8b76603493f) (new tests removed because quilt does not support binary diffs) . kwajd_read_headers(): initialise pointers before returning any error, otherwise kwajd_close() calls mspack_system.free() with uninitialised pointers, which is undefined behaviour for the default system's free(). Thank you to Yukimura Aneha for the report, example files and patch! |
Stuart Caie <kyzer@cabextract.org.uk> | not-needed | 2026-10-21 |
