CVE-2025-65100

Isar is an integration system for automated root filesystem generation. In versions 0.11-rc1 and 0.11, defining ISAR_APT_SNAPSHOT_DATE alone does not set the correct timestamp value for security distribution, leading to missed security updates. This issue has been patched via commit 738bcbb.

Score

CVSS 4.0 6.9 Medium

Status

Deferred - security-advisories@github.com

Published

2025-11-19

Last modified

2026-10-18

Weaknesses

CWE-693

Affected products

• Isar (Ilbers)

References

• https://github.com/ilbers/isar/security/advisories/GHSA-3r9w-6cp6-7hm4
• https://github.com/ilbers/isar/commit/3383fd808a4ced93e41e012660dfe364a3384434
• https://github.com/ilbers/isar/commit/738bcbb716c7eb7b34cbb2293cae4f264b3925fe