Sylvain Beucler pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
9c5f2c7f by Sylvain Beucler at 2026-05-11T14:11:47+02:00
Reserve DLA-4577-1 for p7zip-rar
- - - - -
2 changed files:
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[11 May 2026] DLA-4577-1 p7zip-rar - security update
+ {CVE-2025-53816}
+ [bullseye] - p7zip-rar 16.02+really25.00+ds-0+deb11u1
[11 May 2026] DLA-4576-1 p7zip - security update
{CVE-2022-47069 CVE-2023-31102 CVE-2023-40481 CVE-2023-52168
CVE-2023-52169 CVE-2024-11612 CVE-2025-11001 CVE-2025-11002 CVE-2025-53817
CVE-2025-55188}
[bullseye] - p7zip 16.02+really25.01+dfsg-0+deb11u1
=====================================
data/dla-needed.txt
=====================================
@@ -392,19 +392,6 @@ openvswitch
orthanc
NOTE: 20260419: Added by Front-Desk (rouca)
--
-p7zip-rar (Sylvain Beucler)
- NOTE: 20250719: Added by Front-Desk (Beuc)
- NOTE: 20260106: CVE-2025-53816: no isolated patch, hard to determine if
- NOTE: 20260106: older/p7zip versions are vulnerable:
- NOTE: 20260106: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1109494#24
- NOTE: 20260106: Proposed EOL or full replacement with 7zip (Beuc)
- NOTE: 20260106:
https://salsa.debian.org/lts-team/lts-updates-tasks/-/issues/306
- NOTE: 20260305: Proposed p7zip-rar-compatible bookworm->stretch packages
(Beuc)
- NOTE: 20260305: https://lists.debian.org/debian-lts/2026/03/msg00009.html
- NOTE: 20260410: 7zip-rar/bookworm-backports updated to better test
bookworm->trixie upgrades (Beuc)
- NOTE: 20260430: Still waiting for SRMs review, no feedback (Beuc)
- NOTE: 20260503: SRM approved, user testing through bookworm-proposed-updates
until OSPU freeze 2026-05-09 (Beuc)
---
php-laravel-framework
NOTE: 20250307: Added by Front-Desk (rouca)
NOTE: 20251027: History of upstream branch fixing v12: git log
9de75259..2d133034^2.
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9c5f2c7f7f176a49c8e95909f14c0c5868e64ae1
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9c5f2c7f7f176a49c8e95909f14c0c5868e64ae1
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
