CVE-2022-26280 affecting package libarchive for versions less than 3.6.1-1

CVE-2022-26280 affecting package libarchive for versions less than 3.6.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-28066 affecting package libarchive for versions less than 3.6.1-1

CVE-2022-28066 affecting package libarchive for versions less than 3.6.1-1. An upgraded version of the package is available that resolves this issue...

SUSE: Security Advisory (SUSE-SU-2022:1930-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for libarchive (SUSE-SU-2022:1930-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLED15 / SLES15 Security Update : libarchive (SUSE-SU-2022:1930-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1930-1 advisory. - An error in the lhareadfileheader1 function archivereadsupportformatlha.c in libarchive 3.2.2 allows remote...

SUSE-SU-2022:1930-1 Security update for libarchive

This update for libarchive fixes the following issues: - CVE-2022-26280: Fixed out-of-bounds read via the component zipxlzmaaloneinit bsc1197634. - CVE-2021-36976: Fixed use-after-free in copystring called from douncompressblock and processblock bsc1188572. - CVE-2017-5601: Fixed out-of-bounds...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libarchive (SUSE-SU-2022:1803-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1803-1 advisory. - CVE-2022-26280: Fixed out-of-bounds read via the component zipxlzmaaloneinit bsc1197634. Tenable has...

SUSE: Security Advisory (SUSE-SU-2022:1803-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for libarchive (FEDORA-2022-bbb5ec21b2)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE: Security Advisory for libarchive (SUSE-SU-2022:1803-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE-SU-2022:1803-1 Security update for libarchive

This update for libarchive fixes the following issues: - CVE-2022-26280: Fixed out-of-bounds read via the component zipxlzmaaloneinit bsc1197634...

[SECURITY] Fedora 36 Update: libarchive-3.5.3-2.fc36

Libarchive is a programming library that can create and read several different streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...

Moderate: Red Hat Bug Fix Advisory: new packages: libarchive

New libarchive packages are available for Red Hat Enterprise Linux 9. For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.0 Release Notes linked from the References section...

libarchive: use-after-free in copy_string()

A use-after-free flaw was found in libarchive in the copystring function...

ROS-20220516-03

A vulnerability in the zipxlzmaaloneinit function of the libarchive archiving library is related to reading beyond the buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker acting remotely, disclose protected information or cause a denial of service...

Read Memory Access

libarchive.so is vulnerable to denial of service. The function lzmadecodedoes not validate the size parameter sufficiently, allowing an attacker to perform a read memory access and causing an application crash...

EulerOS Virtualization 2.9.1 : libarchive (EulerOS-SA-2022-1608)

According to the versions of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists,...

EulerOS Virtualization 2.9.0 : libarchive (EulerOS-SA-2022-1631)

According to the versions of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists,...

Huawei EulerOS: Security Advisory for libarchive (EulerOS-SA-2022-1608)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libarchive (EulerOS-SA-2022-1631)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...