On Fri, 2023-08-25 at 20:47 +0900, yokota wrote: > I was extracted 6.2.9 fix and apply it to Git for other UnRAR version > that distributed in Debian 10,11,12. > Please examine the fix from unrar-nonfree Git repository:
Thanks for fixing it so early (which I've had seen, btw). :-) My mail was really just about the missing entry in the security tracker, as this CVE is now quite "famous" and people may look it up there (at the security tracker) and be unsure whether or not it is already fixed (which it is), especially since the changelog.Debian contains as of now the ZDI-number only, and not the CVE) Cheers, Chris.