Fedora 43 : 7zip (2025-b6422d64f9)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-b6422d64f9 advisory. Various CVE fixes, most importantly CVE-2025-11001 This also backports the Debian patch PR unfortunately stalled upstream, with no communication fro...

PT-2025-17393 · 7 Zip +3 · 7-Zip +2

Name of the Vulnerable Software and Affected Versions: 7-Zip versions 22.01 through 24.09 Description: The issue involves 7-Zip not reporting an error for certain invalid xz files, specifically those with issues related to stream flags and reserved bits. Recommendations: For versions 22.01 throug...