CVE-2025-65100: Security Snapshot May Use Unintended Timestamp When Only ISAR_APT_SNAPSHOT_DATE Is Set

Description

Isar is an integration system for automated root filesystem generation. In versions 0.11-rc1 and 0.11, defining ISAR_APT_SNAPSHOT_DATE alone does not set the correct timestamp value for security distribution, leading to missed security updates. This issue has been patched via commit 738bcbb.

Exploitation

Is it being used?

Exploit prediction (EPSS)0.4% · higher than 31% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

IS

isar · ilbers

< 738bcbb716c7eb7b34cbb2293cae4f264b3925fe · source: vendor