USN-3703-1: Archive Zip
Published Jul 4, 2018
·Updated
It was discovered that the Archive Zip module incorrectly handled certain inputs. An attacker could possibly use this to access sensitive information.
Affected Software
1 affected component
archive/zip
Event History
Feb 20, 2026
Advisory Published
via Ubuntu·03:58 PM
Data Sourced
via Ubuntu·03:58 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of USN-3703-1?
The severity of USN-3703-1 is considered important due to potential unauthorized access to sensitive information.
2
How do I fix USN-3703-1?
To fix USN-3703-1, upgrade to the appropriate libarchive-zip-perl version: 1.60-1ubuntu0.1 for Ubuntu 18.04, 1.59-1ubuntu0.1 for 17.10, 1.56-2ubuntu0.1 for 16.04, or 1.30-7ubuntu0.1 for 14.04.
3
What software does USN-3703-1 affect?
USN-3703-1 affects the libarchive-zip-perl package in multiple versions of Ubuntu.
4
What is the root cause of USN-3703-1?
USN-3703-1 is caused by the Archive Zip module incorrectly handling certain inputs.
5
Can USN-3703-1 be exploited remotely?
Yes, USN-3703-1 can potentially be exploited remotely to access sensitive information.