OESA-2025-1131

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1131
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2025-1131.json
JSON Data
https://api.osv.dev/v1/vulns/OESA-2025-1131
Upstream
Published
2025-02-14T12:13:08Z
Modified
2025-09-03T06:20:42.018700Z
Summary
ark security update
Details

Ark is a program for managing various archive formats. Archives can be viewed, extracted, created and modified from within Ark. The program can handle various formats such as tar, gzip, bzip2, zip, rar and lha (if appropriate command-line programs are installed).

Security Fix(es):

libarchiveplugin.cpp in KDE ark before 24.12.0 can extract to an absolute path from an archive.(CVE-2024-57966)

Database specific 
{
    "severity": "Medium"
}
References

Affected packages

openEuler:22.03-LTS-SP3 / ark

Package

Name
ark
Purl
pkg:rpm/openEuler/ark&distro=openEuler-22.03-LTS-SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
22.08.3-2.oe2203sp3

Ecosystem specific 

{
    "x86_64": [
        "ark-22.08.3-2.oe2203sp3.x86_64.rpm",
        "ark-debuginfo-22.08.3-2.oe2203sp3.x86_64.rpm",
        "ark-debugsource-22.08.3-2.oe2203sp3.x86_64.rpm",
        "ark-libs-22.08.3-2.oe2203sp3.x86_64.rpm"
    ],
    "src": [
        "ark-22.08.3-2.oe2203sp3.src.rpm"
    ],
    "aarch64": [
        "ark-22.08.3-2.oe2203sp3.aarch64.rpm",
        "ark-debuginfo-22.08.3-2.oe2203sp3.aarch64.rpm",
        "ark-debugsource-22.08.3-2.oe2203sp3.aarch64.rpm",
        "ark-libs-22.08.3-2.oe2203sp3.aarch64.rpm"
    ]
}