[SECURITY] [DLA 657-1] libarchive security update

Package : libarchive Version : 3.0.4-3+wheezy4 CVE ID : CVE-2016-5418 Debian Bug : 837714 It was found that libarchive mishandled hardlink archive entries of non-zero data size, possibly allowing remote attackers to to write to arbitrary files via especially crafted archives. For Debian 7 "Wheezy...

DLA-657-1 libarchive - security update

Bulletin has no description...

The vulnerability of the Mac OS X operating system, which allows a perpetrator to trigger a service failure or cause other adverse effects

The vulnerability of the libarchive component in the Mac OS X operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure memory corruption or other effects through a specially...

FreeBSD : FreeBSD -- Multiple libarchive vulnerabilities (1a71a972-8ee7-11e6-a590-14dae9d210b8)

Flaws in libarchive's handling of symlinks and hard links allow overwriting files outside the extraction directory, or permission changes to a directory outside the extraction directory. Impact : An attacker who can control freebsd-update's or portsnap's input to tar1 can change file content or...

FreeBSD-SA-16:31.libarchive

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:31.libarchive Security Advisory The FreeBSD Project Topic: Multiple libarchive vulnerabilities Category: core Module: portsnap Announced: 2016-10-05 Affects:...

Heap-buffer-overflow in archive_read_format_cpio_read_header

Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4798906516897792 Fuzzer: libFuzzerlibarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x61900014e080 Crash State: archivereadformatcpioreadheader...

FreeBSD -- Multiple libarchive vulnerabilities

Problem Description: Flaws in libarchive's handling of symlinks and hard links allow overwriting files outside the extraction directory, or permission changes to a directory outside the extraction directory. Impact: An attacker who can control freebsd-update's or portsnap's input to tar1 can chan...

Apple OS X libarchive Memory Corruption Vulnerability

Apple OS X is a specialized operating system developed by Apple for Mac computers. libarchive is a multi-format archive and compression library component of it. A memory corruption vulnerability exists in libarchive in Apple OS X versions prior to 10.12, which can be exploited by remote attackers...

Amazon Linux AMI : libarchive (ALAS-2016-743)

A flaw was found in the way libarchive handled hardlink archive entries of non-zero size. Combined with flaws in libarchive's file system sandboxing, this issue could cause an application using libarchive to overwrite arbitrary files with arbitrary data from the archive. CVE-2016-5418 Multiple...

Important: libarchive

Issue Overview: A flaw was found in the way libarchive handled hardlink archive entries of non-zero size. Combined with flaws in libarchive's file system sandboxing, this issue could cause an application using libarchive to overwrite arbitrary files with arbitrary data from the archive...

Debian DSA-3677-1 : libarchive - security update

Several vulnerabilities were discovered in libarchive, a multi-format archive and compression library, which may lead to denial of service memory consumption and application crash, bypass of sandboxing restrictions and overwrite arbitrary files with arbitrary data from an archive, or the executio...

MGASA-2016-0318 Updated libarchive packages fix security vulnerability

The updated packages fix several security vulnerabilities: A flaw was found in the way libarchive handled hardlink archive entries of non-zero size. Combined with flaws in libarchive's file system sandboxing, this issue could cause an application using libarchive to overwrite arbitrary files with...

Updated libarchive packages fix security vulnerability

The updated packages fix several security vulnerabilities: A flaw was found in the way libarchive handled hardlink archive entries of non-zero size. Combined with flaws in libarchive's file system sandboxing, this issue could cause an application using libarchive to overwrite arbitrary files with...

CVE-2016-4736

libarchive in Apple OS X before 10.12 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted file...

CVE-2016-4736

libarchive in Apple OS X before 10.12 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted file...

Memory corruption

libarchive in Apple OS X before 10.12 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted file...

CVE-2016-4736

libarchive in Apple OS X before 10.12 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted file...

CVE-2016-4736

CVE-2016-4736 : Apple OS X libarchive before 10.12 is affected. A crafted file can trigger memory corruption, leading to a denial of service (and potentially other impact). Affected component: libarchive in OS X. Root cause: memory corruption via crafted archive handling. Mitigation: apply the ma...

[SECURITY] [DSA 3677-1] libarchive security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3677-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 25, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3677-1] libarchive security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3677-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 25, 2016 https://www.debian.org/security/faq -...