[Git][security-tracker-team/security-tracker][master] CVE-2026-58052/7zip,p7zip: restore triage

[Sylvain Beucler (@beuc)]

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker


Commits:
203791c0 by Sylvain Beucler at 2026-09-14T09:40:44+02:00
CVE-2026-58052/7zip,p7zip: restore triage

Cf. 35aa4e2bd03781d3aea9e2deae28a916ffdb932
    a0b9eb204b4532c2ad517d3423439698e690433f
    b76e1ee94c9b7ab957d8ff5ef9b295b3f8d464cf

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -81540,7 +81540,10 @@ CVE-2026-58053 (Gitea act_runner with the Docker backend (through act 0.262.0) p
 CVE-2026-58052 (7-Zip for Windows through 26.01 fails to preserve the Mark-of-the-Web  ...)
 	- 7zip 26.03+dfsg-1
 	[trixie] - 7zip <ignored> (Only affects Windows NTFS with transparent ADS and :$DATA canonicalization, i.e. not the current ntfs-3g)
+	[bookworm] - 7zip <ignored> (Only affects Windows NTFS with transparent ADS and :$DATA canonicalization, i.e. not the current ntfs-3g)
 	- p7zip 16.02+transitional.1
+	[bookworm] - p7zip <ignored> (Only affects Windows NTFS with transparent ADS and :$DATA canonicalization, i.e. not the current ntfs-3g)
+	[bullseye] - p7zip <ignored> (Only affects Windows NTFS with transparent ADS and :$DATA canonicalization, i.e. not the current ntfs-3g)
 	NOTE: Since p7zip/16.02+transitional.1 src:p7zip is only an empty source package
 	NOTE: depending on 7zip. Mark this version as fixed version.
 	NOTE: https://github.com/bikini/exploitarium/tree/main/7zip-rar5-motw-chain-poc



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/203791c035c2c1368abf3be5dfa539b571fc29d3

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/203791c035c2c1368abf3be5dfa539b571fc29d3
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260914/f95c6ee4/attachment.htm>