Summary
It was discovered that libarchive incorrectly handled certain archive files.
An attacker could possibly use this issue to expose sensitive information.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | libarchive | 3.4.0-2ubuntu1.2 |
Vulnerabilities 1
-
Unscored —
Libarchive v3.6.0 was discovered to contain an out-of-bounds read via the component zipx_lzma_alone_init.
References
-
report
https://ubuntu.com/security/CVE-2022-26280