Azure Linux 3.0 Security Update: libarchive (CVE-2024-48958)

The version of libarchive installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-48958 advisory. - executefilterdelta in archivereadsupportformatrar.c in libarchive before 3.7.5 allows out-of-bounds acce...

Security update for libarchive

This update for libarchive fixes the following issues: CVE-2024-48958: Fixed out-of-bounds access in executefilterdelta bsc1231624. CVE-2024-20697: Fixed out-of-bounds remote code execution vulnerability bsc1225972. CVE-2024-48957: Fixed out-of-bounds access in executefilteraudio bsc1231544. Patc...

SUSE-SU-2025:20087-1 Security update for libarchive

This update for libarchive fixes the following issues: - CVE-2024-48958: Fixed out-of-bounds access in executefilterdelta bsc1231624. - CVE-2024-20697: Fixed out-of-bounds remote code execution vulnerability bsc1225972. - CVE-2024-48957: Fixed out-of-bounds access in executefilteraudio bsc1231544...

Security update for libarchive

This update for libarchive fixes the following issues: CVE-2024-20696: Fixed out-of-bounds access in in copyfromlzsswindowtounp bsc1225971 CVE-2024-20697: Fixed heap based buffer overflow in rar e8 filter bsc1225972 Patch Instructions: To install this SUSE update use the SUSE recommended...

SUSE-SU-2025:20050-1 Security update for libarchive

This update for libarchive fixes the following issues: - CVE-2024-20696: Fixed out-of-bounds access in in copyfromlzsswindowtounp bsc1225971 - CVE-2024-20697: Fixed heap based buffer overflow in rar e8 filter bsc1225972...

KDE Ark 安全漏洞

KDE Ark is a graphical file compression/decompression utility for the KDE community. A security vulnerability exists in KDE Ark versions prior to 24.12.0, which stems from the fact that libarchiveplugin.cpp can extract absolute paths from archives...

CVE-2024-57966

CVE-2024-57966 affects KDE Ark; libarchiveplugin.cpp in Ark before 24.12.0 allows extraction to absolute paths, enabling overwriting of files. Root cause: insecure path handling in archive extraction. Impact: potential unauthorized file overwrite. Remediation: upgrade Ark to a version with the fi...

Advisory ROSA-SA-2025-2583

Software: libarchive 3.6.2 OS: ROSA-CHROME packageevrstring: libarchive-3.6.2 CVE-ID: CVE-2024-48957 BDU-ID: 2024-09446 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the executefilteraudio function of the archivereadsupportformatrar.c component of the Libarchive archiving library is related to...

libarchive RAR File Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of libarchive. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of RAR file...

libarchive run_filters Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of libarchive. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the runfilters method...

GHSA-75MX-HW5Q-PVX3 python-libarchive directory traversal

python-libarchive through 4.2.1 allows directory traversal to create files in extract in zip.py for ZipFile.extractall and ZipFile.extract...

python-libarchive directory traversal

python-libarchive through 4.2.1 allows directory traversal to create files in extract in zip.py for ZipFile.extractall and ZipFile.extract...

CVE-2024-55587

python-libarchive through 4.2.1 allows directory traversal to create files in extract in zip.py for ZipFile.extractall and ZipFile.extract...

CVE-2024-55587: Improper Limitation of a Pathname to a Restricted Directory

python-libarchive through 4.2.1 allows directory traversal to create files in extract in zip.py for ZipFile.extractall and ZipFile.extract...

python-libarchive 安全漏洞

python-libarchive is a Libarchive wrapper for Python open-sourced by SmartFile. A security vulnerability exists in python-libarchive version 4.2.1, which stems from allowing directory traversal of ZipFile.extractall and ZipFile.extract in a zip.py extraction...

Directory Traversal

Overview python-libarchive is an A libarchive wrapper for Python supporting password protection. Affected versions of this package are vulnerable to Directory Traversal due to improper input sanitization through the ZipFile, extract and extractall methods. An attacker can create arbitrary files o...

CVE-2024-55587

python-libarchive through 4.2.1 allows directory traversal to create files in extract in zip.py for ZipFile.extractall and ZipFile.extract...

CVE-2024-55587

python-libarchive through 4.2.1 allows directory traversal to create files in extract in zip.py for ZipFile.extractall and ZipFile.extract...

CVE-2024-55587

python-libarchive through 4.2.1 allows directory traversal to create files in extract in zip.py for ZipFile.extractall and ZipFile.extract...

CVE-2024-55587

The python-libarchive library, versions 4.2.1 and prior , is vulnerable to a directory traversal vulnerability (CWE-22) within the zip.py component. Specifically, the ZipFile.extractall and ZipFile.extract methods fail to properly sanitize file paths, allowing an attacker to use special character...