CVE:CVE-2022-26280
CNNVD:CNNVD-202203-2377
libarchive是一款多格式存档和压缩库。
Libarchive v3.6.0存在安全漏洞，该漏洞源于组件 zipx_lzma_alone_init 的越界读取。
solution:Upgrade libarchive libarchive to a higher version than 3.6.0,and avoid the version 3.6.0; Upgrade fedoraproject fedora to a higher version than 36,and avoid the version 36