Описание
ELSA-2026-8492: libarchive security update (IMPORTANT)
[3.7.7-8]
- Resolves: CVE-2026-4424
[3.7.7-7]
- Release bump for typo in dist
[3.7.7-6]
- Release bump
Обновленные пакеты
Oracle Linux 10
Oracle Linux aarch64
bsdtar
3.7.7-8.el10_1
libarchive
3.7.7-8.el10_1
libarchive-devel
3.7.7-8.el10_1
Oracle Linux x86_64
bsdtar
3.7.7-8.el10_1
libarchive
3.7.7-8.el10_1
libarchive-devel
3.7.7-8.el10_1
Связанные CVE
Связанные уязвимости
A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication or user interaction.
A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication or user interaction.
A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication or user interaction.
Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing
A flaw was found in libarchive. This heap out-of-bounds read vulnerabi ...