ECHO-B895-01C2-E619

Bulletin has no description...

ECHO-5EEB-EAAF-9357

Bulletin has no description...

ECHO-BC64-5C49-0F35

Bulletin has no description...

ECHO-8F7E-6FF6-02F5

Bulletin has no description...

ECHO-3B51-FC9B-BEE5

Bulletin has no description...

ECHO-0E5E-7C8E-8329

Bulletin has no description...

ECHO-1C44-AB8A-99DC

Bulletin has no description...

ECHO-3374-923A-46A0

Bulletin has no description...

ECHO-5CA9-F3D7-5670

Bulletin has no description...

ECHO-CAC1-499A-4AED

Bulletin has no description...

ECHO-6361-A731-D327

Bulletin has no description...

ECHO-4A0F-6724-E994

Bulletin has no description...

ECHO-89C2-9149-2F37

Bulletin has no description...

ECHO-49C7-4E0E-F2A6

Bulletin has no description...

ECHO-4F58-A58D-8E80

Bulletin has no description...

ECHO-5AA5-E5E2-E8EE

Bulletin has no description...

ECHO-EEFB-B682-DC9B Low-severity (CVSS 3.1 2.5, CWE-754, Debian "unimportant") error-reporting quirk: 7-Zip 22.01 silently returns OK for an xz file with reserved bits set in the block flags instead of flagging it. No memory-safety impact. NVD's affected-version data is pinned to exactly 22.01 and states "Some later versions are unaffected"; remediated upstream by version currency, not by a separate patch, so there is nothing to backport. Verified against the reporter's PoC (boofish/semantic-bugs pocs/poc1.xz) on this build's 25.01 binaries: the standalone 7za/7zr hard-error (exit 2, "Is not archive") and 7zz/7z no longer silently accept it (now emit "Warnings: 1"), so the reported silent-acceptance behavior does not reproduce.

Bulletin has no description...

ECHO-7B47-8F62-C1EF

Bulletin has no description...

ECHO-3114-E2A8-C7CD

Bulletin has no description...

ECHO-A259-9BA0-438C

Bulletin has no description...