SUSE-SU-2022:1930-1 Security update for libarchive

This update for libarchive fixes the following issues: - CVE-2022-26280: Fixed out-of-bounds read via the component zipxlzmaaloneinit bsc1197634. - CVE-2021-36976: Fixed use-after-free in copystring called from douncompressblock and processblock bsc1188572. - CVE-2017-5601: Fixed out-of-bounds...

SUSE: Security Advisory (SUSE-SU-2022:1803-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for libarchive (FEDORA-2022-bbb5ec21b2)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE: Security Advisory for libarchive (SUSE-SU-2022:1803-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libarchive (SUSE-SU-2022:1803-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1803-1 advisory. - CVE-2022-26280: Fixed out-of-bounds read via the component zipxlzmaaloneinit bsc1197634. Tenable has...

SUSE-SU-2022:1803-1 Security update for libarchive

This update for libarchive fixes the following issues: - CVE-2022-26280: Fixed out-of-bounds read via the component zipxlzmaaloneinit bsc1197634...

[SECURITY] Fedora 36 Update: libarchive-3.5.3-2.fc36

Libarchive is a programming library that can create and read several different streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...

ROS-20220516-03

A vulnerability in the zipxlzmaaloneinit function of the libarchive archiving library is related to reading beyond the buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker acting remotely, disclose protected information or cause a denial of service...

Read Memory Access

libarchive.so is vulnerable to denial of service. The function lzmadecodedoes not validate the size parameter sufficiently, allowing an attacker to perform a read memory access and causing an application crash...

Huawei EulerOS: Security Advisory for libarchive (EulerOS-SA-2022-1631)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libarchive (EulerOS-SA-2022-1608)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.9.0 : libarchive (EulerOS-SA-2022-1631)

According to the versions of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists,...

EulerOS Virtualization 2.9.1 : libarchive (EulerOS-SA-2022-1608)

According to the versions of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists,...

CVE-2022-28066

Removed by vendor...

Debian DLA-2987-1 : libarchive - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2987 advisory. Three issues have been found in libarchive, a multi-format archive and compression library. CVE-2021-31566 symbolic links incorrectly followed when changing modes,...

Debian: Security Advisory (DLA-2987-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2987-1] libarchive security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2987-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz April 30, 2022 https://wiki.debian.org/LTS -...

Privilege Escalation

libarchive is vulnerable to privilege escalation. The vulnerability exists due to a lack of validation of the access control list ACL when extracting a maliciously crafted link...

DLA-2987-1 libarchive - security update

Bulletin has no description...

Slackware: Security Advisory (SSA:2022-098-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...