Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:3960-1

Опубликовано: 03 сент. 2026
Источник: suse-cvrf

Описание

Security update for file-roller

This update for file-roller fixes the following issue:

  • CVE-2026-78322: stack buffer overflow in parse_progress_line for 7z and RAR handlers (bsc#1276442).

Список пакетов

SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
file-roller-3.20.3-15.12.1
file-roller-lang-3.20.3-15.12.1
nautilus-file-roller-3.20.3-15.12.1

Ссылки

Описание

A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller's progress-line parsing copies the path into a fixed-size stack buffer using an unbounded string copy. This can trigger a stack buffer overflow and cause file-roller to terminate, resulting in a denial of service. To exploit this flaw, a victim must open or extract the crafted archive using file-roller.

Затронутые продукты
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:file-roller-3.20.3-15.12.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:file-roller-lang-3.20.3-15.12.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nautilus-file-roller-3.20.3-15.12.1
Ссылки