DSA-4360: -1 libarchive -- security update
libarchive - security update
Other sources
Multiple security issues were found in libarchive, a multi-format archive and compression library: Processing malformed RAR archives could result in denial of service or the execution of arbitrary code and malformed WARC, LHarc, ISO, Xar or CAB archives could result in denial of service.
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
Who is most exposed to these issues?
Systems or applications that use libarchive to process archive files from untrusted sources are most exposed. The impact depends on the archive format: malformed RAR files may lead to denial of service or arbitrary code execution, while malformed WARC, LHarc, ISO, Xar, and CAB files may lead to denial of service.
What does an attacker need to provide to trigger the vulnerabilities?
An attacker needs to cause libarchive to process a specially malformed archive. The relevant inputs are RAR, WARC, LHarc, ISO, Xar, or CAB archives.