openSUSE-SU-2026:20273-1

Import Source

JSON Data

https://api.osv.dev/v1/vulns/openSUSE-SU-2026:20273-1

Upstream

CVE (2)

Related

CVE (2)

Published

2026-02-26T11:53:30Z

Modified

2026-03-23T04:54:49Z

Summary

Security update for 7zip

Details

This update for 7zip fixes the following issues:

Update to 25.01 (boo#1249130)
- The code for handling symbolic links has been changed to provide greater security when extracting files from archives
- Command line switch -snld20 can be used to bypass default security checks when creating symbolic links.
Update to 25.00:
- bzip2 compression speed was increased by 15-40%.
- deflate (zip/gz) compression speed was increased by 1-3%.
- improved support for zip, cpio and fat archives.
- CVE-2025-53816: Fixed input manipulation leading to heap buffer overflow (bsc#1246706)
- CVE-2025-53817: Fixed null pointer dereference leading to denial of service (bsc#1246707)

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

25.01-160000.1.1

{
    "binaries":  [
        {
            "7zip":  "25.01-160000.1.1"
        }
    ]
}

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20273-1.json"