[Pkg-utopia-maintainers] Bug#1144105: ostree: GHSA-7cgc-gp99-6jmm: resource exhaustion via LZMA decoding

Simon McVittie smcv at debian.org
Fri Aug 21 00:59:56 BST 2026


Control: reopen -1 2026.4-1

On Wed, 12 Aug 2026 at 17:26:03 +0200, Alberto Garcia wrote:
>The current fix for this bug is causing regressions, so let's wait a
>bit until they are resolved:
>
>   https://github.com/ostreedev/ostree/issues/3635

One of the changes made to address this was reverted, fixing the 
regression but also reopening the resource-exhaustion issue.

     smcv



More information about the Pkg-utopia-maintainers mailing list