7zip 25.01 (boo#1249130) CVE-2025-53816 boo#1246706 CVE-2025-53817 boo#1246707 #1

Closed
AndreasStieger wants to merge 3 commits from (deleted):slfo-1.2 into slfo-1.2
4 changed files with 24 additions and 7 deletions

Binary file not shown.

3
7z2501-src.tar.xz Normal file
View File

@@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:ed087f83ee789c1ea5f39c464c55a5c9d4008deb0efe900814f2df262b82c36e
size 1533240

View File

@@ -1,3 +1,20 @@
-------------------------------------------------------------------
Thu Sep 4 16:39:55 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
- Update to 25.01 (boo#1249130)
* The code for handling symbolic links has been changed to
provide greater security when extracting files from archives
* Command line switch -snld20 can be used to bypass default
security checks when creating symbolic links.
- includes changes from 25.00:
* bzip2 compression speed was increased by 15-40%.
* deflate (zip/gz) compression speed was increased by 1-3%.
* improved support for zip, cpio and fat archives.
* CVE-2025-53816 : 7-Zip could work incorrectly for some
incorrect RAR archives (boo#1246706)
* CVE-2025-53817 : 7-Zip could crash for some incorrect COM
(Compound File) archives (boo#1246707)
-------------------------------------------------------------------
Sun Dec 1 16:49:52 UTC 2024 - Antonio Teixeira <antonio.teixeira@suse.com>

View File

@@ -1,8 +1,8 @@
#
# spec file for package 7zip
#
# Copyright (c) 2024 SUSE LLC
# Copyright (c) 2024 Andreas Stieger <Andreas.Stieger@gmx.de>
# Copyright (c) 2025 SUSE LLC and contributors
# Copyright (c) 2025 Andreas Stieger <Andreas.Stieger@gmx.de>
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -17,9 +17,9 @@
#
%define stripped_version 2409
%define stripped_version 2501
Name: 7zip
Version: 24.09
Version: 25.01
Release: 0
Summary: Command-line file archiver with high compression ratio
# CPP/7zip/Compress/LzfseDecoder.cpp is under the BSD-3-Clause