Fedora 30 : xar (2020-bbd24dd0cf)

The remote Fedora 30 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2020-bbd24dd0cf advisory. - Use Apple upstream instead of non-fresh Github one - New upstream in 1.8 dev branch with 417.1 subversion - Close CVE-2018-17093 - Close...

Fedora: Security Advisory for xar (FEDORA-2020-bbd24dd0cf)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2010-3798

Heap-based buffer overflow in xar in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted xar archive...

CVE-2010-3798

CVE-2010-3798 affects Apple Mac OS X 10.6.x prior to 10.6.5, where a heap-based buffer overflow in xar could be triggered by a crafted xar archive. This could allow remote code execution or cause an application crash (DoS). Remediation per the description is updating to Mac OS X 10.6.5 (Apple sec...