Hello security team, I plan to fix open CVEs of libarchive in stable. Both CVE-2026-14164 and CVE-2026-15028 are marked as no-DSA. But CVE-2026-16517 is not yet.
Shall I do a SPU fixing all three issues for the next point release (12 Sept.), if CVE-2026-16517 is also marked as no-DSA. --abhijith
