Описание
7-Zip before 25.01 does not always properly handle symbolic links during extraction.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| 7zip | fixed | 25.01+dfsg-1 | package | |
| 7zip | fixed | 25.01+dfsg-1~deb13u1 | trixie | package |
| 7zip | fixed | 22.01+really25.01+dfsg-0+deb12u1 | bookworm | package |
| p7zip | fixed | 16.02+transitional.1 | package | |
| p7zip | fixed | 16.02+really25.01+dfsg-0+deb12u1 | bookworm | package |
Примечания
Since p7zip/16.02+transitional.1 src:p7zip is only a empty source package
depending on 7zip. Mark this version as fixed version.
https://github.com/ip7z/7zip/releases/tag/25.01
https://www.openwall.com/lists/oss-security/2025/08/09/1
EPSS
Связанные уязвимости
7-Zip before 25.01 does not always properly handle symbolic links during extraction.
7-Zip before 25.01 does not always properly handle symbolic links during extraction.
7-Zip before 25.01 does not always properly handle symbolic links during extraction.
Уязвимость файлового архиватора 7-Zip, связанная с неверным определением символических ссылок перед доступом к файлу, позволяющая нарушителю обойти ограничения безопасности
ALT-PU-2025-11829: package `7-zip` update to version 25.01-alt1
EPSS