https://bugzilla.redhat.com/show_bug.cgi?id=1981895
--- Comment #3 from Garrett Tucker <gtucker(a)redhat.com> ---
After analysis, a Denial of Service attack is possible via an infinite loop
caused by a crafted 7Z archive. The construction of the list of codecs for
decompression did not check for usage of the same codec more than once in the
codec chain. Thus a specially crafted archive could force an infinite loop
impacting availability of a system.
This flaw has been fixed in Version 1.21
--
You are receiving this mail because:
You are on the CC list for the bug.