Cyber ·
Releases cabextract 1.12 and libmspack 0.12alpha with security fixes
New versions of cabextract and libmspack fix security problems and bugs, including a case in an LZX block header, according to an announcement forwarded on the oss-sec list on 12 November 2026.
The oss-sec list announced on 12 November 2026, forwarded by Hanno Böck, the release of cabextract 1.12 and libmspack 0.12alpha. According to the announcement, the versions fix several security problems and recently reported bugs. The highlighted case is an uncompressed LZX block header with invalid R0, R1 and R2 values, followed by a verbatim or aligned block. The available excerpt does not detail the impact, additional affected versions or a proof of concept, and it indicates that the full list of fixes is in the original announcement. To verify, consult the announcement in the public oss-sec archive, search for the versions by name and check the release notes on each project's page. Update packages that depend on these libraries when the vendor publishes the fix. This topic has no direct relation to the Rota Nacional platform, since it concerns CAB format extraction libraries and does not involve AI models.
Original source: Lançadas as versões cabextract 1.12 e libmspack 0.12alpha