Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
62b49a6b by Salvatore Bonaccorso at 2026-09-14T17:27:04+02:00
Add CVE-2025-64031/libarchive
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -287,7 +287,10 @@ CVE-2025-70820 (Zettlab D6 Ultra before 1.7.0 allows
absolute path traversal to
CVE-2025-68624 (N-able Mail Assure through April 2026 contains a design-level
authoriz ...)
NOT-FOR-US: N-able Mail Assure
CVE-2025-64031 (libarchive 3.8.x before 3.8.2 has a strcpy heap-based buffer
overflow ...)
- TODO: check
+ - libarchive <not-affected> (Vulnerable code never in a Debian released
version)
+ NOTE: https://github.com/libarchive/libarchive/pull/2734
+ NOTE: Introduced with:
https://github.com/libarchive/libarchive/commit/84ac71335fd7bc151be763dd525353c182b280b5
(v3.8.0)
+ NOTE: Fixed by:
https://github.com/libarchive/libarchive/commit/53e85224536a73600f6920f692c9d38e16753bd9
(v3.8.2)
CVE-2025-63842 (A Cross-Site Scripting (XSS) vulnerability in the web backend
for the ...)
TODO: check
CVE-2025-26790 (Withsecure Atlant with Capricorn engine before 2025-01-20_02
allows a ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/62b49a6b962676a8ba6647ce00096444666ed0cb
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/62b49a6b962676a8ba6647ce00096444666ed0cb
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
