Bug 53160 - All releases through 1.2.5 are affected by CVE-2025-26519 and should be patched.
Summary: All releases through 1.2.5 are affected by CVE-2025-26519 and should be patched.
Status: CLOSED FIXED
Alias: None
Product: Sisyphus
Classification: Development
Component: musl (show other bugs)
Version: unstable
Hardware: x86_64 Linux
: P5 normal
Assignee: Vitaly Chikunov
QA Contact: qa-sisyphus
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2025-02-20 11:08 MSK by Ulysses Apokin
Modified: 2025-02-21 04:51 MSK (History)
1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Ulysses Apokin 2025-02-20 11:08:33 MSK 
SECURITY ADVISORY: All releases through 1.2.5 are affected by CVE-2025-26519 and should be patched (1, 2).

https://www.openwall.com/lists/musl/2025/02/13/1
https://www.openwall.com/lists/musl/2025/02/13/1/1
https://www.openwall.com/lists/musl/2025/02/13/1/2
Comment 1 Repository Robot 2025-02-21 04:51:36 MSK 
musl-1.2.5-alt3 -> sisyphus:

 Fri Feb 21 2025 Vitaly Chikunov <vt@altlinux> 1.2.5-alt3
 - Security update (Fixes: CVE-2025-26519) (ALT#53160).