[Git][security-tracker-team/security-tracker][master] Add CVE-2026-15028/libarchive

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8daff298 by Salvatore Bonaccorso at 2026-07-20T09:54:46+02:00
Add CVE-2026-15028/libarchive

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -8323,7 +8323,10 @@ CVE-2026-15143 (A flaw was found in the file_type content detector of guardrails
 CVE-2026-15104 (The BetterDocs \u2013 AI Documentation, Knowledge Base, Docs, Wikis, F ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-15028 (A flaw was found in libarchive. This vulnerability allows a remote att ...)
-	TODO: check
+	- libarchive <unfixed>
+	NOTE: https://github.com/libarchive/libarchive/issues/3251
+	NOTE: https://github.com/libarchive/libarchive/pull/3253
+	NOTE: Fixed by: https://github.com/libarchive/libarchive/commit/c16162083a247efd4a2bc71401489bec3090ae7c
 CVE-2026-15026 (The Import and export users and customers plugin for WordPress is vuln ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-14475 (The Cookie Banner for GDPR / CCPA \u2013 WPLP Cookie Consent plugin fo ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8daff2988102833222e3bb1547ff46bf89826fad

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8daff2988102833222e3bb1547ff46bf89826fad
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260720/5a2472bf/attachment-0001.htm>