Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.bugs.dist > #1102845
| From | Stefano Rivera <stefanor@debian.org> |
|---|---|
| Newsgroups | linux.debian.bugs.dist |
| Subject | Bug#1010837: CVE-2022-30333 (unrar file write vulnerability) patch not yet available for Debian 10 packages |
| Date | 2022-05-11 23:50 +0200 |
| Message-ID | <Em2nv-eQ9j-1@gated-at.bofh.it> (permalink) |
| References | <ElSet-eK7D-7@gated-at.bofh.it> <ElQw1-eJjr-3@gated-at.bofh.it> <ElSet-eK7D-7@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
Hi Martin (2022.05.11_06:47:38_-0400) > fixed 1010837 1:6.1.2-1 Going from the security tracker: https://security-tracker.debian.org/tracker/CVE-2022-30333 > 6.12 application version corresponds to 6.1.7 source version: > https://github.com/debian-calibre/unrar-nonfree/compare/upstream/6.1.6...upstream/6.1.7 So, that should probably be fixed in 1:6.1.7-1, not 1:6.1.2-1 SR -- Stefano Rivera http://tumbleweed.org.za/ +1 415 683 3272
Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Bug#1010837: CVE-2022-30333 (unrar file write vulnerability) patch not yet available for Debian 10 packages Martin Meredith <mez@debian.org> - 2022-05-11 11:10 +0200
Bug#1010837: CVE-2022-30333 (unrar file write vulnerability) patch not yet available for Debian 10 packages Stefano Rivera <stefanor@debian.org> - 2022-05-11 23:50 +0200
Bug#1010837: CVE-2022-30333 (unrar file write vulnerability) patch not yet available for Debian 10 packages Martin Meredith <martin.meredith@substrakthealth.com> - 2022-05-12 14:20 +0200
csiph-web