Alerts This Week
Warning Icon 1 1,220
Alerts This Week
Warning Icon 1 1,220

Slackware 15.0 SSA:2025-051-01 critical: ark archive leak fix

slackware
Calendar Grey February 20, 2025
Dist Slackware Esm H88
Fresh ark plugins launched for Slackware 15.0 to address vulnerabilities and boost overall system protection.
New ark packages are available for Slackware 15.0 and -current to fix a security issue

Summary

Here are the details from the Slackware 15.0 ChangeLog: patches/packages/ark-21.12.1-i586-2_slack15.0.txz: Rebuilt. The ark archive tool in KDE was found to extract to absolute paths if they are present in the archive, which may be surprising to those who haven't examined an archive before extracting it. It has been patched to discard any leading '/' in paths to prevent this unlikely occurrence. Thanks to pbslxw for the heads-up. For more information, see: https://www.cve.org/CVERecord?id=CVE-2024-57966 (* Security fix *)

Topics%20covered

Topics Covered

security advisory security issue update package update patch slackware Slackware archive tool ark

Where Find New Packages

Thanks to the friendly folks at the OSU Open Source Lab (http://osuosl.org) for donating FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 15.0: ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/ark-21.12.1-i586-2_slack15.0.txz
Updated package for Slackware x86_64 15.0: ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/ark-21.12.1-x86_64-2_slack15.0.txz
Updated package for Slackware -current: ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/kde/ark-23.08.5-i686-2.txz
Updated package for Slackware x86_64 -current: ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/kde/ark-23.08.5-x86_64-2.txz

MD5 Signatures

Slackware 15.0 package: 6a839223f6254618afbcfbb10eb175ef ark-21.12.1-i586-2_slack15.0.txz
Slackware x86_64 15.0 package: 9aa453fdefa4a6adb19bf0e68891e407 ark-21.12.1-x86_64-2_slack15.0.txz
Slackware -current package: 87f69391f541b78904f74d32153f3ef8 kde/ark-23.08.5-i686-2.txz
Slackware x86_64 -current package: cabab889f60ab143a3042bdca497d478 kde/ark-23.08.5-x86_64-2.txz

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory security issue update package update patch slackware Slackware archive tool ark

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg ark-21.12.1-i586-2_slack15.0.txz

Your message here