Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 5d67da42 by Salvatore Bonaccorso at 2025-04-27T22:49:56+02:00 Track fixed version for CVE-2025-25724/libarchive The 3.7.4-2 contained only the changes required to fix CVE-2025-1632 and did not use the upstream merged patch as https://github.com/libarchive/libarchive/commit/c9bc934e7e91d302e0feca6e713ccc38d6d01532 The 3.7.4-3 upload switched to the upstream fix (and covering as well CVE-2025-25724). - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -18214,7 +18214,7 @@ CVE-2025-25726 CVE-2025-25725 REJECTED CVE-2025-25724 (list_item_verbose in tar/util.c in libarchive through 3.7.7 does not c ...) - - libarchive <unfixed> (unimportant; bug #1103479) + - libarchive 3.7.4-3 (unimportant; bug #1103479) NOTE: https://github.com/Ekkosun/pocs/blob/main/bsdtarbug NOTE: https://github.com/libarchive/libarchive/issues/2529 NOTE: https://github.com/libarchive/libarchive/commit/c9bc934e7e91d302e0feca6e713ccc38d6d01532 (master) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5d67da4241f79c5e83de784828f1bd32fa9768ca -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5d67da4241f79c5e83de784828f1bd32fa9768ca You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
