USN-6805-1: libarchive vulnerability

Reference Links

• https://ubuntu.com/security/CVE-2024-26256
• https://launchpad.net/ubuntu/+source/libarchive/3.7.2-2ubuntu0.1
• https://launchpad.net/ubuntu/+source/libarchive/3.6.2-1ubuntu1.1
• https://launchpad.net/ubuntu/+source/libarchive/3.6.0-1ubuntu1.1
• https://ubuntu.com/security/notices/USN-6805-1 (Advisory)

Child vulnerabilities

(Contains the following vulnerabilities)

• CVE-2024-26256

Frequently Asked Questions

• What is the severity of USN-6805-1?

  The severity of USN-6805-1 is considered high due to the potential for arbitrary code execution or crashes.

• How do I fix USN-6805-1?

  To fix USN-6805-1, you should upgrade to the latest patched version of libarchive as specified in the advisory for your Ubuntu version.

• What versions of Ubuntu are affected by USN-6805-1?

  USN-6805-1 affects Ubuntu versions 22.04, 23.10, and 24.04 with specific versions of libarchive.

• What kind of attack can be executed through USN-6805-1?

  An attacker can exploit USN-6805-1 to execute arbitrary code or cause a denial of service by crashing the application.

• Where can I find more information about USN-6805-1?

  You can find more information about USN-6805-1 in the Ubuntu security notices section.