Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 573
Alerts This Week
Warning Icon 1 573

Ubuntu 21.10 & 20.04 LTS: USN-5374-1 Moderate Libarchive Information Leak

ubuntu
Calendar Grey April 11, 2022
Dist Ubuntu Esm H88
Users of Ubuntu 21.10 and 20.04 LTS are advised to upgrade libarchive to address a vulnerability that might compromise sensitive information.
libarchive could be made to expose sensitive information if it received a specially crafted archive file.

Summary

libarchive could be made to expose sensitive information if it received a

specially crafted archive file.

Software Description:

- libarchive: Library to read/write archive files

Details:

It was discovered that libarchive incorrectly handled certain archive files.

An attacker could possibly use this issue to expose sensitive information.

Topics%20covered

Topics Covered

security advisory moderate information leak software update ubuntu libarchive archive file

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 21.10:
  libarchive13                    3.4.3-2ubuntu0.2

Ubuntu 20.04 LTS:
  libarchive13                    3.4.0-2ubuntu1.2

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5374-1

CVE-2022-26280

April 11, 2022

Topics%20covered

Topics Covered

security advisory moderate information leak software update ubuntu libarchive archive file

Package Information

https://launchpad.net/ubuntu/+source/libarchive/3.4.3-2ubuntu0.2
https://launchpad.net/ubuntu/+source/libarchive/3.4.0-2ubuntu1.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.