Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora 40: FEDORA-2024-80e4603b92 critical: libarchive out-of-bounds access

fedora
Calendar Grey October 19, 2024
Dist Fedora Esm H88
Automatic enhancements for libarchive on Fedora 40 targeting CVE-2024-48957 include critical security upgrades and comprehensive release notes.
Fix for CVE-2024-48957 Automatic update for libarchive-3.7.2-6.fc40.

Summary

Libarchive is a programming library that can create and read several different

streaming archive formats, including most popular tar variants, several cpio

formats, and both BSD and GNU ar variants. It can also write shar archives and

read ISO9660 CDROM images and ZIP archives.

Update Information:

Fix for CVE-2024-48957 Automatic update for libarchive-3.7.2-6.fc40.

Topics%20covered

Topics Covered

security advisory software update Fedora CVE fix out-of-bounds access libarchive archive handling

Change Log

* Mon Oct 14 2024 Lukas Javorsky - 3.7.2-7 - Fix CVE-2024-48957 - Resolves: rhbz#2317764 * Tue Jul 2 2024 Lukas Javorsky - 3.7.2-6 - Fix licenses (convert to SPDX) * Thu Jun 6 2024 Lukas Javorsky - 3.7.2-5 - Fix CVE-2024-20696 - Resolves: rhbz#2290449

References


[ 1 ] Bug #2317764 - CVE-2024-48957 libarchive: Out-of-bounds access in libarchive's archive file handling [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2317764

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-80e4603b92' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: libarchive
Product: Fedora 40
Version: 3.7.2
Release: 7.fc40
URL: https://www.libarchive.org/
Summary: A library for handling streaming archive formats

Topics%20covered

Topics Covered

security advisory software update Fedora CVE fix out-of-bounds access libarchive archive handling

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here