CVE-2025-55188
7-Zip before 25.01 does not always properly handle symbolic links during extraction.
Original description
The description as published by the source.
7-Zip before 25.01 does not always properly handle symbolic links during extraction.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2025-55188 7zip Fixed in: 22.01+really25.01+dfsg-0+deb12u1
References
- advisory github.com
- advisory nvd.nist.gov
- web openwall.com
- web openwall.com
- web openwall.com
- web openwall.com
- web openwall.com
- web github.com
- web github.com
- web github.com
- web sourceforge.net
- web openwall.com
- web vicarius.io
- web vicarius.io
- web youtu.be
- web lunbun.dev