Bug#1106104: ark: CVE-2024-57966

Package: ark

Version: ark_22.12.3-1

Severity: normal

Dear Maintainer,

This is the patch for bullseye applied to bookworm. It builds with “debuild -us -uc”.

This is my first submission so I didn’t know if I should send the patch, or a patch that puts the patch into Debian/patches. I sent the former.

Joe

-- System Information:

Debian Release: 12.10

APT prefers stable-updates

APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')

Architecture: amd64 (x86_64)

Kernel: Linux 5.4.0-190-generic (SMP w/40 CPU threads)

Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set

Shell: /bin/sh linked to /usr/bin/dash

Init: unable to detect

Versions of packages ark depends on:

pn kinit <none>

ii kio 5.103.0-1+deb12u1

ii libarchive13 3.6.2-1+deb12u2

ii libc6 2.36-9+deb12u10

ii libgcc-s1 12.2.0-14

ii libkf5completion5 5.103.0-1

ii libkf5configcore5 5.103.0-2

ii libkf5configgui5 5.103.0-2

ii libkf5configwidgets5 5.103.0-1

ii libkf5coreaddons5 5.103.0-1

ii libkf5crash5 5.103.0-1

ii libkf5dbusaddons5 5.103.0-1

ii libkf5i18n5 5.103.0-1

ii libkf5jobwidgets5 5.103.0-1

ii libkf5kiocore5 5.103.0-1+deb12u1

ii libkf5kiofilewidgets5 5.103.0-1+deb12u1

ii libkf5kiogui5 5.103.0-1+deb12u1

ii libkf5kiowidgets5 5.103.0-1+deb12u1

ii libkf5parts5 5.103.0-1

ii libkf5pty5 5.103.0-1

ii libkf5service-bin 5.103.0-1

ii libkf5service5 5.103.0-1

ii libkf5widgetsaddons5 5.103.0-1

ii libkf5xmlgui5 5.103.0-1

ii libqt5core5a 5.15.8+dfsg-11+deb12u2

ii libqt5dbus5 5.15.8+dfsg-11+deb12u2

ii libqt5gui5 5.15.8+dfsg-11+deb12u2

ii libqt5widgets5 5.15.8+dfsg-11+deb12u2

ii libstdc++6 12.2.0-14

ii libzip4 1.7.3-1+b1

ii zlib1g 1:1.2.13.dfsg-1

Versions of packages ark recommends:

ii bzip2 1.0.8-5+b1

pn p7zip-full <none>

pn unar <none>

ii unzip 6.0-28

pn zip <none>

Versions of packages ark suggests:

pn rar <none>

pn unrar | unrar-free <none>