Divya Chellam 37be814fb2 libarchive: fix CVE-2025-5918 ... A vulnerability has been identified in the libarchive library. This flaw can be triggered whe n file streams are piped into bsdtar, potentially allowing for reading past the end of the fi le. This out-of-bounds read can lead to unintended consequences, including unpredictable prog ram behavior, memory corruption, or a denial-of-service condition. CVE-2025-5918-0001 is the dependent commit and CVE-2025-5918-0002 is the actual CVE fix. Reference: https://security-tracker.debian.org/tracker/CVE-2025-5918 Upstream-patches: 89b8c35ff4 dcbf1e0ede (From OE-Core rev: 369c164a163b2c7f15ee5fc41130be9feaf7245e) Signed-off-by: Divya Chellam <divya.chellam@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>		2025-07-09 08:43:32 -07:00
..
libarchive	libarchive: fix CVE-2025-5918	2025-07-09 08:43:32 -07:00
libarchive_3.7.9.bb	libarchive: fix CVE-2025-5918	2025-07-09 08:43:32 -07:00