openSUSE Security Update : libarchive (openSUSE-2016-670)

This update for libarchive fixes the following issue : - Fix a heap-based buffer overflow CVE-2016-1541, bsc979005 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2016-670. The text...

[SECURITY] Fedora 22 Update: libarchive-3.1.2-14.fc22

Libarchive is a programming library that can create and read several differ ent streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...

FreeBSD-SA-16:22.libarchive

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:22.libarchive Security Advisory The FreeBSD Project Topic: Directory traversal in cpio1 Category: contrib Module: libarchive Announced: 2016-05-31 Credits:...

FreeBSD-SA-16:23.libarchive

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:23.libarchive Security Advisory The FreeBSD Project Topic: Buffer overflow in libarchive3 Category: contrib Module: libarchive Announced: 2016-05-31 Affects:...

Heap-buffer-overflow in uudecode_bidder_bid

Project: https://github.com/libarchive/libarchive.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6051005141614592 Fuzzer: libFuzzerlibarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60400000deb...

Apple TV < 9.1 Multiple Vulnerabilities

Binary data 9334.prm...

Mac OS X 10.9.5 or later < 10.11.1 Multiple Vulnerabilities

Binary data 9324.prm...

[slackware-security] libarchive

New libarchive packages are available for Slackware 14.1 and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/libarchive-3.1.2-i486-2slack14.1.txz: Rebuilt. Patched an issue with Zip archive handling that could allow an attacker to overwri...

Slackware 14.1 / current : libarchive (SSA:2016-145-01)

New libarchive packages are available for Slackware 14.1 and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2016-145-01. The text itself is copyright C...

MGASA-2016-0179 Updated libarchive packages fix CVE-2016-1541

Updated libarchive packages fix security vulnerability: Heap-based buffer overflow in the zipreadmacmetadata function in archivereadsupportformatzip.c in libarchive before 3.2.0 allows remote attackers to execute arbitrary code via crafted entry-size values in a ZIP archive CVE-2016-1541. The...

Updated libarchive packages fix CVE-2016-1541

Updated libarchive packages fix security vulnerability: Heap-based buffer overflow in the zipreadmacmetadata function in archivereadsupportformatzip.c in libarchive before 3.2.0 allows remote attackers to execute arbitrary code via crafted entry-size values in a ZIP archive CVE-2016-1541. The...

Ubuntu 14.04 LTS / 16.04 LTS : libarchive vulnerabilities (USN-2981-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2981-1 advisory. It was discovered that libarchive incorrectly handled certain entry-size values in ZIP archives. A remote attacker could use this issue to cause...

Ubuntu: Security Advisory (USN-2981-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2981-1: libarchive vulnerabilities

It was discovered that libarchive incorrectly handled certain entry-size values in ZIP archives. A remote attacker could use this issue to cause libarchive to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only applied to Ubuntu 14.04 LTS, Ubuntu 15.10 and...

USN-2981-1 libarchive vulnerabilities

It was discovered that libarchive incorrectly handled certain entry-size values in ZIP archives. A remote attacker could use this issue to cause libarchive to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only applied to Ubuntu 14.04 LTS, Ubuntu 15.10 and...

PT-2016-4059

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.2.0 Description The issue allows remote attackers to cause a denial of service, resulting in an invalid read and crash, via crafted cpio files. Recommendations For versions prior to 3.2.0, update to version 3.2.0...

[SECURITY] Fedora 23 Update: libarchive-3.1.2-15.fc23

Libarchive is a programming library that can create and read several differ ent streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...

[SECURITY] Fedora 24 Update: libarchive-3.1.2-17.fc24

Libarchive is a programming library that can create and read several differ ent streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...

Debian DSA-3574-1 : libarchive - security update

Rock Stevens, Andrew Ruef and Marcin 'Icewall' Noga discovered a heap-based buffer overflow vulnerability in the zipreadmacmetadata function in libarchive, a multi-format archive and compression library, which may lead to the execution of arbitrary code if a user or automated system is tricked in...

FreeBSD : libarchive -- RCE vulnerability (2b4c8e1f-1609-11e6-b55e-b499baebfeaf)

The libarchive project reports : Heap-based buffer overflow in the zipreadmacmetadata function in archivereadsupportformatzip.c in libarchive before 3.2.0 allows remote attackers to execute arbitrary code via crafted entry-size values in a ZIP archive. %NASLMINLEVEL 70300 C Tenable Network...