[ubuntu/noble-updates] libarchive 3.7.2-2ubuntu0.5 (Accepted)

[Ubuntu Archive Robot]

libarchive (3.7.2-2ubuntu0.5) noble-security; urgency=medium

  * SECURITY UPDATE: double free issue                                     
    - debian/patches/CVE-2025-5914.patch: rar: Fix double free with over   
      4 billion nodes                                                      
    - CVE-2025-5914                                                        
  * SECURITY UPDATE: heap-based buffer overflow                            
    - debian/patches/CVE-2025-5915.patch: rar: Fix heap-buffer-overflow    
    - CVE-2025-5915                                                        
  * SECURITY UPDATE: integer overflow                                      
    - debian/patches/CVE-2025-5916.patch: warc: Prevent signed integer     
      overflow                                                             
    - CVE-2025-5916                                                        
  * SECURITY UPDATE: out-of-bound write overflow                           
    - debian/patches/CVE-2025-5917.patch: Fix overflow in build_ustar_entry
    - CVE-2025-5917

Date: 2025-06-25 10:01:14.215468+00:00
Changed-By: Nishit Majithia <nishit.majithia at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/libarchive/3.7.2-2ubuntu0.5
-------------- next part --------------
Sorry, changesfile not available.