ECHO-5552-ce75-412d
See a problem?- Import Source
- https://advisory.echohq.com/osv/ECHO-5552-ce75-412d.json
- JSON Data
- https://api.osv.dev/v1/vulns/ECHO-5552-ce75-412d
- Upstream
- Withdrawn
- 2025-10-29T09:39:19Z
- Published
- 2025-09-15T01:10:16Z
- Modified
- 2026-09-15T03:33:36Z
- Summary
- The issue is that a specific function is not thread safe, changing the umask for the whole process, meaning multiple uses of libarchive in different threads could cause a race condition that could have various consequences. The issue was fixed with added documentation that specifies that the function is not thread safe. https://github.com/libarchive/libarchive/issues/1876 https://security-tracker.debian.org/tracker/CVE-2023-30571 The documentation change which was merged to master https://github.com/libarchive/libarchive/pull/1875
- Details
- References