#libarchive

0 stories this week · 0 this month · 2 in 6 months · mostly security

Stories per day · 30 days

2 stories, newest first · one card per story

Ubuntu patches libarchive signed integer overflow in ZIP writer that could let crafted encrypted entries crash the library or execute arbitrary code.

ZDI disclosed an unpatched symlink directory traversal flaw (CVE-2026-92205, CVSS 6.1) in BusyBox libarchive enabling arbitrary file creation.

Stories tagged #libarchive