Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2026-55195 →
DEBIAN-CVE-2026-55195
py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryption. Prior to 1.1.3, py7zr's Wor...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryption. Prior to 1.1.3, py7zr's Worker.decompress() extracted archive entries without tracking total decompressed size, allowing a crafted .7z file such as a 15.6 KB archive that expands to 100 MB to exhaust disk or memory before extraction completes. This issue is fixed in version 1.1.3.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
py7zr
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:13
py7zr
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:14
py7zr
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3+dfsg-1"}]}]
Références
- advisory security-tracker.debian.org