Medium ELSA-2022-5252 1 CVE

Moderate: libarchive security update (Oracle Linux 9)

Published Jun 30, 2022 · Updated Jun 30, 2022

Ecosystem: Oracle Linux

Summary

[3.5.3-2]
- Resolves: CVE-2022-26280

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 9	bsdtar	0:3.5.3-2.el9_0
Oracle Linux · 9	libarchive	0:3.5.3-2.el9_0
Oracle Linux · 9	libarchive-devel	0:3.5.3-2.el9_0

Vulnerabilities 1

Unscored —

CVE-2022-26280

Libarchive v3.6.0 was discovered to contain an out-of-bounds read via the component zipx_lzma_alone_init.

libarchive libarchive libarchive libarchive Debian Ubuntu Azure Linux Alpine

Mar 28, 2022