-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-4567-1                [email protected]
https://www.debian.org/lts/security/                           Chris Lamb
May 06, 2026                                  https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : lrzip
Version        : 0.641-1+deb11u2
CVE ID         : CVE-2025-15570
Debian Bug     : 1128069

It was discovered that there was a potential use-after-free issue in
the lrzip compression/decompression program.

For Debian 11 bullseye, this problem has been fixed in version
0.641-1+deb11u2.

We recommend that you upgrade your lrzip packages.

For the detailed security status of lrzip please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/lrzip

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

-----BEGIN PGP SIGNATURE-----
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=oyjM
-----END PGP SIGNATURE-----

Reply via email to