[SECURITY] Fedora 40 Update: libarchive-3.7.2-7.fc40

Libarchive is a programming library that can create and read several different streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...

Fedora 40 : libarchive (2024-80e4603b92)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-80e4603b92 advisory. Fix for CVE-2024-48957 ---- Automatic update for libarchive-3.7.2-6.fc40. Tenable has extracted the preceding description block directly from the Fedora...

CVE-2024-48957 affecting package libarchive for versions less than 3.6.1-4

CVE-2024-48957 affecting package libarchive for versions less than 3.6.1-4. A patched version of the package is available...

CVE-2024-48958 affecting package libarchive for versions less than 3.6.1-4

CVE-2024-48958 affecting package libarchive for versions less than 3.6.1-4. A patched version of the package is available...

OESA-2024-2286 libarchive security update

is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use . Security...

execute_filter_audio in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst.

...

execute_filter_delta in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst.

...

CBL Mariner 2.0 Security Update: libarchive (CVE-2024-48957)

The version of libarchive installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-48957 advisory. - executefilteraudio in archivereadsupportformatrar.c in libarchive before 3.7.5 allows out-of-bounds acce...

CBL Mariner 2.0 Security Update: libarchive (CVE-2024-48958)

The version of libarchive installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-48958 advisory. - executefilterdelta in archivereadsupportformatrar.c in libarchive before 3.7.5 allows out-of-bounds acce...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libarchive (SUSE-SU-2024:3675-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3675-1 advisory. - CVE-2024-48957: Fixed out-of-bounds access in executefilteraudio in archivereadsupportformatrar.c...

openSUSE Security Advisory (SUSE-SU-2024:3675-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7070-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for libarchive

This update for libarchive fixes the following issues: CVE-2024-48957: Fixed out-of-bounds access in executefilteraudio in archivereadsupportformatrar.c bsc1231544. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

SUSE-SU-2024:3675-1 Security update for libarchive

This update for libarchive fixes the following issues: - CVE-2024-48957: Fixed out-of-bounds access in executefilteraudio in archivereadsupportformatrar.c bsc1231544...

USN-7070-1 libarchive vulnerabilities

It was discovered that libarchive mishandled certain memory checks, which could result in a NULL pointer dereference. An attacker could potentially use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubun...

USN-7070-1: libarchive vulnerabilities

It was discovered that libarchive mishandled certain memory checks, which could result in a NULL pointer dereference. An attacker could potentially use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubun...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : libarchive vulnerabilities (USN-7070-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7070-1 advisory. It was discovered that libarchive mishandled certain memory checks, which could result in a...

SUSE CVE-2024-48958

executefilterdelta in archivereadsupportformatrar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst...

Slackware: Security Advisory (SSA:2024-287-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] libarchive

New libarchive packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libarchive-3.7.7-i586-1slack15.0.txz: Upgraded. This update fixes bug and the following security issues: gzip: prevent a hang when...