3 matches found
CLSA-2025-1764778336 libarchive: Fix of 2 CVEs
CVE-2025-5917: fix overflow in buildustarentry - CVE-2025-5918: do not skip past EOF while reading...
Security update for libarchive
This update for libarchive fixes the following issues: CVE-2025-5914: Fixed double free due to an integer overflow in the archivereadformatrarseekdata function bsc1244272 CVE-2025-5915: Fixed heap buffer over read in copyfromlzsswindow at archivereadsupportformatrar.c bsc1244273 CVE-2025-5916:...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the buildustarentryname function when processing file name prefixes and suffixes. An attacker can cause adjacent memory corruption, potentially leading to application crashes or unpredictable behavior, by supplyi...