MGASA-2024-0363

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2024-0363.html

Import Source

https://advisories.mageia.org/MGASA-2024-0363.json

JSON Data

https://api.test.osv.dev/v1/vulns/MGASA-2024-0363

Related

CVE-2024-20696

Published

2024-11-13T18:48:01Z

Modified

2024-11-13T18:13:47Z

Summary

Updated libarchive packages fix security vulnerability

Details

A heap-based out-of-bounds write vulnerability was discovered in libarchive, a multi-format archive and compression library, which may result in the execution of arbitrary code if a specially crafted RAR archive is processed. (CVE-2024-20696)

References

https://advisories.mageia.org/MGASA-2024-0363.html
https://bugs.mageia.org/show_bug.cgi?id=33757
https://lists.debian.org/debian-security-announce/2024/msg00220.html

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

MGASA-2024-0363

Affected packages