> Debian Buildstream Important File Write Issue DSA-6559-1 CVE-2026-82331
[DATE: 14/10/2026 14:13]
[LANGUAGE: EN]
It was discovered that missing validation of tar sources in the Buildstream software integration tool could allow to write files on the build host. For the stable distribution (trixie), this problem has been fixed in version 1.6.9-2+deb13u1.