- Packages tracked
- 38,394
- CVEs found
- 728
- Fixed in fork
- 13
- Fixed upstream
- 8
- In flight
- 6
- Pending
- 700
728 matching records
| CVE | Project | Title | Fork fix | State | Evidence | Discussion |
|---|---|---|---|---|---|---|
| DEBIAN-CVE-2025-60753 | debian/libarchive | An issue was discovered in libarchive bsdtar before version 3.8.1 in function apply_substitution in file tar/subst.c when processing crafted -s substitution rules. This can cause unbounded memory allocation and lead to denial of service (Out-of-Memory crash). | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2026-14164 | debian/libarchive | A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filtered_buf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry can trigger a second free of th | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2026-15028 | debian/libarchive | A flaw was found in libarchive. This vulnerability allows a remote attacker to trigger a heap overflow by providing a specially crafted tar archive. The issue occurs during the parsing of a PAX extended header containing a malformed SUN.holesdata sparse-file attribute. Successful exploitation could | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2026-16517 | debian/libarchive | A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archive_write_zip_header function in archive_write_set_format_zip.c, when ZIP encryption is enabled and the entry file size is close to INT64_MAX, the addition of the encryption overhead to the entry size overflows | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2026-17591 | debian/libarchive | A flaw was found in libarchive. An attacker can cause a Denial of Service (DoS) or potential information disclosure due to a use-after-free vulnerability, which occurs when a program reads memory that has already been released. This issue arises when the archive_entry_copy_mac_metadata() function de | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2026-4111 | debian/libarchive | A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a specially crafted RAR5 archive is processed, the decompression routine may enter a state where internal logic prevents forward progress. This c | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2026-4424 | debian/libarchive | A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR arch | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2026-4426 | debian/libarchive | A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, caused by improper validation of a field (`pz_log2_bs`) read from ISO9660 Rock Ridge extensions. A remote attacker can exploit this by supplying a specially crafted ISO file. This can lead t | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2026-5121 | debian/libarchive | A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbi | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2026-5745 | debian/libarchive | A flaw was found in libarchive. A NULL pointer dereference vulnerability exists in the ACL parsing logic, specifically within the archive_acl_from_text_nl() function. When processing a malformed ACL string (such as a bare "d" or "default" tag without subsequent fields), the function fails to perform | - | Awaiting approval | Evidence | None recorded |
| DLA-1006-1 | debian/libarchive | libarchive - security update | - | Awaiting approval | Evidence | None recorded |
| DLA-1092-1 | debian/libarchive | libarchive - security update | - | Awaiting approval | Evidence | None recorded |
| DLA-1600-1 | debian/libarchive | libarchive - security update | - | Awaiting approval | Evidence | None recorded |
| DLA-1612-1 | debian/libarchive | libarchive - security update | - | Awaiting approval | Evidence | None recorded |
| DLA-166-1 | debian/libarchive | libarchive - security update | - | Awaiting approval | Evidence | None recorded |
| DLA-1668-1 | debian/libarchive | libarchive - security update | - | Awaiting approval | Evidence | None recorded |
| DLA-1971-1 | debian/libarchive | libarchive - security update | - | Awaiting approval | Evidence | None recorded |
| DLA-2987-1 | debian/libarchive | libarchive - security update | - | Awaiting approval | Evidence | None recorded |
| DLA-3202-1 | debian/libarchive | libarchive - security update | - | Awaiting approval | Evidence | None recorded |
| DLA-3294-1 | debian/libarchive | libarchive - security update | - | Awaiting approval | Evidence | None recorded |
| DLA-3950-1 | debian/libarchive | libarchive - security update | - | Awaiting approval | Evidence | None recorded |
| DLA-4368-1 | debian/libarchive | libarchive - security update | - | Awaiting approval | Evidence | None recorded |
| DLA-554-1 | debian/libarchive | libarchive - security update | - | Awaiting approval | Evidence | None recorded |
| DLA-617-1 | debian/libarchive | libarchive - security update | - | Awaiting approval | Evidence | None recorded |
| DLA-657-1 | debian/libarchive | libarchive - security update | - | Awaiting approval | Evidence | None recorded |
| DLA-661-1 | debian/libarchive | libarchive - security update | - | Awaiting approval | Evidence | None recorded |
| DLA-810-1 | debian/libarchive | libarchive - security update | - | Awaiting approval | Evidence | None recorded |
| DSA-1455-1 | debian/libarchive | libarchive | - | Awaiting approval | Evidence | None recorded |
| DSA-2413-1 | debian/libarchive | libarchive - buffer overflows | - | Awaiting approval | Evidence | None recorded |
| DSA-3180-1 | debian/libarchive | libarchive - security update | - | Awaiting approval | Evidence | None recorded |
| DSA-3574-1 | debian/libarchive | libarchive - security update | - | Awaiting approval | Evidence | None recorded |
| DSA-3657-1 | debian/libarchive | libarchive - security update | - | Awaiting approval | Evidence | None recorded |
| DSA-3677-1 | debian/libarchive | libarchive - security update | - | Awaiting approval | Evidence | None recorded |
| DSA-4360-1 | debian/libarchive | libarchive - security update | - | Awaiting approval | Evidence | None recorded |
| DSA-4557-1 | debian/libarchive | libarchive - security update | - | Awaiting approval | Evidence | None recorded |
| DSA-5706-1 | debian/libarchive | libarchive - security update | - | Awaiting approval | Evidence | None recorded |
| DSA-5806-1 | debian/libarchive | libarchive - security update | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2006-0747 | debian/freetype | Integer underflow in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a font file with an odd number of blue values, which causes the underflow when decrementing by 2 in a context that assumes an even number of values. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2006-1861 | debian/freetype | Multiple integer overflows in FreeType before 2.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attack vectors related to (1) bdf/bdflib.c, (2) sfnt/ttcmap.c, (3) cff/cffgload.c, and (4) the read_lwfn function and a crafted LWFN file in base/ftma | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2006-2661 | debian/freetype | ftutil.c in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a crafted font file that triggers a null dereference. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2006-3467 | debian/freetype | Integer overflow in FreeType before 2.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PCF file, as demonstrated by the Red Hat bad1.pcf test file, due to a partial fix of CVE-2006-1861. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2007-1351 | debian/freetype | Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2007-2754 | debian/freetype | Integer signedness error in truetype/ttgload.c in Freetype 2.3.4 and earlier might allow remote attackers to execute arbitrary code via a crafted TTF image with a negative n_points value, which leads to an integer overflow and heap-based buffer overflow. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2007-3506 | debian/freetype | The ft_bitmap_assure_buffer function in src/base/ftbimap.c in FreeType 2.3.3 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors involving bitmap fonts, related to a "memory buffer overwrite bug." | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2008-1806 | debian/freetype | Integer overflow in FreeType2 before 2.3.6 allows context-dependent attackers to execute arbitrary code via a crafted set of 16-bit length values within the Private dictionary table in a Printer Font Binary (PFB) file, which triggers a heap-based buffer overflow. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2008-1807 | debian/freetype | FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via an invalid "number of axes" field in a Printer Font Binary (PFB) file, which triggers a free of arbitrary memory locations, leading to memory corruption. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2008-1808 | debian/freetype | Multiple off-by-one errors in FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via (1) a crafted table in a Printer Font Binary (PFB) file or (2) a crafted SHC instruction in a TrueType Font (TTF) file, which triggers a heap-based buffer overflow. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2009-0946 | debian/freetype | Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute arbitrary code via vectors related to large values in certain inputs in (1) smooth/ftsmooth.c, (2) sfnt/ttcmap.c, and (3) cff/cffload.c. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2010-1797 | debian/freetype | Multiple stack-based buffer overflows in the cff_decoder_parse_charstrings function in the CFF Type2 CharStrings interpreter in cff/cffgload.c in FreeType before 2.4.2, as used in Apple iOS before 4.0.2 on the iPhone and iPod touch and before 3.2.2 on the iPad, allow remote attackers to execute arbi | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2010-2497 | debian/freetype | Integer underflow in glyph handling in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file. | - | Awaiting approval | Evidence | None recorded |