漏洞关键信息 CVE ID: CVE-2025-65100 Severity: Moderate Affected versions: v0.11-rc1, v0.11 Patched versions: 738bcbb716c7 Description Impact: - The and variables are used for controlling snapshot timestamps for package sources. - If neither nor is set, the timestamp falls back on , which can result in an unintended value. This may lead to the installation of older, unpatched packages. Patches: - Patch 1/2: Lazy expand ISAR_APT_SNAPSHOT_DATE flag. - Patch 2/2: Derive distribution snapshot date from provided value. Workaround: - Set or if patches are not applied. Credits Remediation developer: fmoessbauer Reporter: clara1kow