file-roller: A flaw was found in file-roller
CVE-2026-78322 is fixed in file-roller on 1 platform, first by DEBIAN-CVE-2026-78322, released August 27, 2026. It is not reported as exploited. Patch Radar priority: Routine.
A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller's progress-line parsing copies the path into a fixed-size stack buffer using an unbounded string copy. This can trigger a stack buffer overflow and cause file-roller to terminate, resulting in a denial of service. To exploit this flaw, a victim must open or extract the crafted archive using file-roller.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| file-roller · Debian 14 | 44.7-1 | DEBIAN-CVE-2026-78322 | Aug 27, 2026 |
| file-roller · opensuse-leap 16.0 | 44.5-bp160.2.1 | OPENSUSE-SU-2026:21667-1 | Aug 27, 2026 |
| file-roller · sles 15.7 | 43.1-150600.3.3.1 | SUSE-SU-2026:4007-1 | Sep 7, 2026 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.