[ubuntu/questing-proposed] libarchive 3.7.7-0ubuntu3 (Accepted)

[Marc Deslauriers]

libarchive (3.7.7-0ubuntu3) questing; urgency=medium

  * SECURITY UPDATE: double free issue
    - debian/patches/CVE-2025-5914.patch: rar: Fix double free with over
      4 billion nodes
    - CVE-2025-5914
  * SECURITY UPDATE: heap-based buffer overflow
    - debian/patches/CVE-2025-5915.patch: rar: Fix heap-buffer-overflow
    - CVE-2025-5915
  * SECURITY UPDATE: integer overflow
    - debian/patches/CVE-2025-5916.patch: warc: Prevent signed integer
      overflow
    - CVE-2025-5916
  * SECURITY UPDATE: out-of-bound write overflow
    - debian/patches/CVE-2025-5917.patch: Fix overflow in build_ustar_entry
    - CVE-2025-5917

Date: 2025-06-26 04:17:15.291724+00:00
Changed-By: Nishit Majithia <nishit.majithia at canonical.com>
Signed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/libarchive/3.7.7-0ubuntu3
-------------- next part --------------
Sorry, changesfile not available.