Package libarchive updated to version 3.1.2-alt2 for branch sisyphus in task 147086.

Published: 2015-04-28
Modified: 2021-03-23

BDU:2015-09697

Уязвимости операционной системы Gentoo Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Severity: HIGH (7.5) Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

References:

Published: 2013-09-30
Modified: 2025-04-11

CVE-2013-0211

Integer signedness error in the archive_write_zip_data function in archive_write_set_format_zip.c in libarchive 3.1.2 and earlier, when running on 64-bit machines, allows context-dependent attackers to cause a denial of service (crash) via unspecified vectors, which triggers an improper conversion between unsigned and signed types, leading to a buffer overflow.

Severity: MEDIUM (5.0) Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

References:

Version: 2.1.2

Package libarchive update in sisyphus on 2015-08-05

ALT-PU-2015-1654-1

Closed vulnerabilities

BDU:2015-09697

CVE-2013-0211