[ubuntu/jammy-security] libarchive 3.6.0-1ubuntu1.8 (Accepted)

[Kyle Kernick]

libarchive (3.6.0-1ubuntu1.8) jammy-security; urgency=medium

  * SECURITY UPDATE: Double free in init_unpack.
    - debian/patches/CVE-2026-14164.patch: Avoid dangling pointers in
      libarchive/archive_read_support_format_rar5.c
    - CVE-2026-14164
  * SECURITY UPDATE: NULL pointer dereference in archive_acl_from_text_nl.
    - debian/patches/CVE-2026-5745.patch: Fix NULL pointer dereference in
      libarchive/archive_acl.c
    - CVE-2026-5745

Date: 2026-07-20 20:37:39.149299+00:00
Changed-By: Kyle Kernick <kyle.kernick at canonical.com>
https://launchpad.net/ubuntu/+source/libarchive/3.6.0-1ubuntu1.8
-------------- next part --------------
Sorry, changesfile not available.