Ubuntu 24.10 & LTS: 7087-1 critical: libarchive denial of service

ubuntu

October 31, 2024

libarchive could be made to crash or run programs as your login if it opened a specially crafted file.

Summary

libarchive could be made to crash or run programs as your login if it

opened a specially crafted file.

Software Description:

- libarchive: Library to read/write archive files

Details:

It was discovered that libarchive incorrectly handled certain RAR archive

files. If a user or automated system were tricked into processing a

specially crafted RAR archive, an attacker could use this issue to cause

libarchive to crash, resulting in a denial of service, or possibly execute

arbitrary code.

Topics Covered

security advisory denial of service Ubuntu libarchive ARbitrary code execution

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.10
   libarchive13t64                 3.7.4-1ubuntu0.1

Ubuntu 24.04 LTS
   libarchive13t64                 3.7.2-2ubuntu0.3

Ubuntu 22.04 LTS
   libarchive13                    3.6.0-1ubuntu1.3

Ubuntu 20.04 LTS
   libarchive13                    3.4.0-2ubuntu1.4

In general, a standard system update will make all the necessary changes.