CVE-2022-28066

CVE-2022-28066 is listed as a duplicate of CVE-2022-26280 and is not the active entry. Connected documents provide concrete details for the underlying issue in libarchive: an out-of-bounds read via the zipx_lzma_alone_init in libarchive versions older than 3.6.1-1. This affects libarchive (3.6.0 ...