[Git][security-tracker-team/security-tracker][master] CVE-2022-47069/p7zip: marked as fixed in transitional package

[Sylvain Beucler (@beuc)]

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker


Commits:
36c46cc7 by Sylvain Beucler at 2026-03-02T19:36:14+01:00
CVE-2022-47069/p7zip: marked as fixed in transitional package

consistently with all other p7zip CVEs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -318698,9 +318698,11 @@ CVE-2022-47071 (In NVS365 V01, the background network test function can trigger
 CVE-2022-47070 (NVS365 V01 is vulnerable to Incorrect Access Control. After entering a ...)
 	NOT-FOR-US: NVS365 V01
 CVE-2022-47069 (p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerabi ...)
-	- p7zip <unfixed> (unimportant)
+	- p7zip 16.02+transitional.1 (unimportant)
 	NOTE: https://sourceforge.net/p/p7zip/bugs/241/
 	NOTE: Crash in CLI tool, no security impact
+	NOTE: Since p7zip/16.02+transitional.1 src:p7zip is only a empty source package
+	NOTE: depending on 7zip. Mark this version as fixed version.
 CVE-2022-47068
 	RESERVED
 CVE-2022-47067



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/36c46cc763a1f932cb9760fb83702a5c211654cc

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/36c46cc763a1f932cb9760fb83702a5c211654cc
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260302/9e31dfaa/attachment-0001.htm>