Описание
Security update for file-roller
This update for file-roller fixes the following issues:
Changes in file-roller:
- CVE-2026-78322: Check line length when parsing command output (bsc#1276442).
Список пакетов
openSUSE Leap 16.0
file-roller-44.5-bp160.2.1
file-roller-lang-44.5-bp160.2.1
nautilus-file-roller-44.5-bp160.2.1
Ссылки
- SUSE Security Ratings
- SUSE Bug 1276442
- SUSE CVE CVE-2026-78322 page
Описание
A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller's progress-line parsing copies the path into a fixed-size stack buffer using an unbounded string copy. This can trigger a stack buffer overflow and cause file-roller to terminate, resulting in a denial of service. To exploit this flaw, a victim must open or extract the crafted archive using file-roller.
Затронутые продукты
openSUSE Leap 16.0:file-roller-44.5-bp160.2.1
openSUSE Leap 16.0:file-roller-lang-44.5-bp160.2.1
openSUSE Leap 16.0:nautilus-file-roller-44.5-bp160.2.1
Ссылки
- CVE-2026-78322
- SUSE Bug 1276442