Linux · Security advisory · June 5, 2024

DSA-5706-1: libarchive security update

DSA-5706-1, released June 5, 2024, fixes 1 CVE in libarchive (version 3.6.2-1+deb12u1). None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
1
Vendor assessment
Highest EPSS
0.8790
99th percentile

Fixed package versions

ProductReleaseFixed in
libarchiveDebian 12.15 (bookworm)3.6.2-1+deb12u1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2024-26256 Libarchive Remote Code Execution Vulnerability 7.8 0.8790 More likely
Showing 1 to 1 of 1 1