diff options
| author | Divya Chellam <divya.chellam@windriver.com> | 2025-07-02 12:21:32 +0530 |
|---|---|---|
| committer | Steve Sakoman <steve@sakoman.com> | 2025-07-09 08:43:32 -0700 |
| commit | 0bccc5ec8559559167be0c2f772594b772112661 (patch) | |
| tree | 6c7b24bc0a3ea257bee3fea003e93be862061fdf /documentation/dev-manual/python-development-shell.rst | |
| parent | 0f2564b7c013ea7690ecfc997adc952d5cade5ea (diff) | |
| download | poky-0bccc5ec8559559167be0c2f772594b772112661.tar.gz | |
libarchive: fix CVE-2025-5916
A vulnerability has been identified in the libarchive library. This flaw
involves an integer overflow that can be triggered when processing a Web
Archive (WARC) file that claims to have more than INT64_MAX - 4 content
bytes. An attacker could craft a malicious WARC archive to induce this
overflow, potentially leading to unpredictable program behavior, memory
corruption, or a denial-of-service condition within applications that
process such archives using libarchive.
Reference:
https://security-tracker.debian.org/tracker/CVE-2025-5916
Upstream-patch:
https://github.com/libarchive/libarchive/commit/ef093729521fcf73fa4007d5ae77adfe4df42403
(From OE-Core rev: 9c74d3a096fed68d173f8711b373a42f158d6cc7)
Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Diffstat (limited to 'documentation/dev-manual/python-development-shell.rst')
0 files changed, 0 insertions, 0 deletions