Описание
Security update for p7zip
This update for p7zip fixes the following issues:
- CVE-2022-47069: heap buffer overflow in
ZipIn.cppfile (bsc#1209648). - CVE-2025-53817: null pointer dereference may lead to denial of service (bsc#1246707).
Список пакетов
SUSE Linux Enterprise Module for Basesystem 15 SP6
p7zip-16.02-150200.14.15.1
p7zip-full-16.02-150200.14.15.1
SUSE Linux Enterprise Module for Basesystem 15 SP7
p7zip-16.02-150200.14.15.1
p7zip-full-16.02-150200.14.15.1
openSUSE Leap 15.6
p7zip-16.02-150200.14.15.1
p7zip-doc-16.02-150200.14.15.1
p7zip-full-16.02-150200.14.15.1
Ссылки
- Link for SUSE-SU-2025:3791-1
- E-Mail link for SUSE-SU-2025:3791-1
- SUSE Security Ratings
- SUSE Bug 1209648
- SUSE Bug 1246707
- SUSE CVE CVE-2022-47069 page
- SUSE CVE CVE-2023-1576 page
- SUSE CVE CVE-2025-53817 page
Описание
p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCd(bool) at CPP/7zip/Archive/Zip/ZipIn.cpp.
Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP6:p7zip-16.02-150200.14.15.1
SUSE Linux Enterprise Module for Basesystem 15 SP6:p7zip-full-16.02-150200.14.15.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:p7zip-16.02-150200.14.15.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:p7zip-full-16.02-150200.14.15.1
Ссылки
- CVE-2022-47069
- SUSE Bug 1209648
- SUSE Bug 1216265
Описание
This is a duplicate of an earlier CVE, CVE-2022-47069.
Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP6:p7zip-16.02-150200.14.15.1
SUSE Linux Enterprise Module for Basesystem 15 SP6:p7zip-full-16.02-150200.14.15.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:p7zip-16.02-150200.14.15.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:p7zip-full-16.02-150200.14.15.1
Ссылки
- CVE-2023-1576
- SUSE Bug 1209648
Описание
7-Zip is a file archiver with a high compression ratio. 7-Zip supports extracting from Compound Documents. Prior to version 25.0.0, a null pointer dereference in the Compound handler may lead to denial of service. Version 25.0.0 contains a fix cor the issue.
Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP6:p7zip-16.02-150200.14.15.1
SUSE Linux Enterprise Module for Basesystem 15 SP6:p7zip-full-16.02-150200.14.15.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:p7zip-16.02-150200.14.15.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:p7zip-full-16.02-150200.14.15.1
Ссылки
- CVE-2025-53817
- SUSE Bug 1246707