SUSE_ALP_Standard/patchinfo.20241112110348278633.90520734224241/_patchinfo

22 lines
1.2 KiB
Plaintext

<patchinfo incident="121">
<!-- generated from request(s) 350250 -->
<issue tracker="bnc" id="1225972">VUL-0: CVE-2024-20697: libarchive: Out of bounds Remote Code Execution Vulnerability</issue>
<issue tracker="bnc" id="1231544">VUL-0: CVE-2024-48957: libarchive: libarchive: out-of-bounds access in execute_filter_audio in archive_read_support_format_rar.c</issue>
<issue tracker="bnc" id="1231624">VUL-0: CVE-2024-48958: libarchive: libarchive: out-of-bounds access via a crafted archive file in execute_filter_delta function</issue>
<issue tracker="cve" id="2024-20697"/>
<issue tracker="cve" id="2024-26256"/>
<issue tracker="cve" id="2024-48957"/>
<issue tracker="cve" id="2024-48958"/>
<packager>ateixeira</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for libarchive</summary>
<description>This update for libarchive fixes the following issues:
- CVE-2024-48958: Fixed out-of-bounds access in execute_filter_delta (bsc#1231624).
- CVE-2024-20697: Fixed out-of-bounds remote code execution vulnerability (bsc#1225972).
- CVE-2024-48957: Fixed out-of-bounds access in execute_filter_audio (bsc#1231544).
</description>
<package>libarchive</package>
<seperate_build_arch/>
</patchinfo>