Groups > linux.debian.bugs.dist > #1102892

Bug#1010837: CVE-2022-30333 (unrar file write vulnerability) patch not yet available for Debian 10 packages

From	Martin Meredith <martin.meredith@substrakthealth.com>
Newsgroups	linux.debian.bugs.dist
Subject	Bug#1010837: CVE-2022-30333 (unrar file write vulnerability) patch not yet available for Debian 10 packages
Date	2022-05-12 14:20 +0200
Message-ID	<EmfXr-eYrM-1@gated-at.bofh.it> (permalink)
References	<Em2nv-eQ9j-1@gated-at.bofh.it> <ElQw1-eJjr-3@gated-at.bofh.it> <Em2nv-eQ9j-1@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

notfixed 1010837 1:6.1.2-1
fixed 1010837 1:6.1.7-1
thanks

Thanks Stefano, I misread 6.12 as 6.1.2 - it's been a long week!

-- 
Kind regards, 
Martin

On May 11 2022, at 10:43 pm, Stefano Rivera <stefanor@debian.org> wrote:

> Hi Martin (2022.05.11_06:47:38_-0400)
>> fixed 1010837 1:6.1.2-1
> 
> Going from the security tracker:
> https://security-tracker.debian.org/tracker/CVE-2022-30333
> 
>> 6.12 application version corresponds to 6.1.7 source version:
>> https://github.com/debian-calibre/unrar-nonfree/compare/upstream/6.1.6...upstream/6.1.7
> 
> 
> So, that should probably be fixed in 1:6.1.7-1, not 1:6.1.2-1
> 
> SR
> 
> -- 
> Stefano Rivera
>  http://tumbleweed.org.za/
>  +1 415 683 3272
>

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Bug#1010837: CVE-2022-30333 (unrar file write vulnerability) patch not yet available for Debian 10 packages Martin Meredith <mez@debian.org> - 2022-05-11 11:10 +0200
  Bug#1010837: CVE-2022-30333 (unrar file write vulnerability) patch not yet available for Debian 10 packages Stefano Rivera <stefanor@debian.org> - 2022-05-11 23:50 +0200
    Bug#1010837: CVE-2022-30333 (unrar file write vulnerability) patch not yet available for Debian 10 packages Martin Meredith <martin.meredith@substrakthealth.com> - 2022-05-12 14:20 +0200

csiph-web