<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 02 Oct 2026 02:58:45 +0000</lastBuildDate>
    <item>
      <title>fkie_cve-2026-78322</title>
      <link>https://db.gcve.eu/vuln/fkie_cve-2026-78322</link>
      <description>&lt;p&gt;A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller&amp;#39;s progress-line parsing copies the path into a fixed-size stack buffer using an unbounded string copy. This can trigger a stack buffer overflow and cause file-roller to terminate, resulting in a denial of service. To exploit this flaw, a victim must open or extract the crafted archive using file-roller.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller&amp;#39;s progress-line parsing copies the path into a fixed-size stack buffer using an unbounded string copy. This can trigger a stack buffer overflow and cause file-roller to terminate, resulting in a denial of service. To exploit this flaw, a victim must open or extract the crafted archive using file-roller.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/fkie_cve-2026-78322</guid>
    </item>
    <item>
      <title>GHSA-qgv9-pfrp-f7x5</title>
      <link>https://db.gcve.eu/vuln/ghsa-qgv9-pfrp-f7x5</link>
      <description>&lt;p&gt;A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller&amp;#39;s progress-line parsing copies the path into a fixed-size stack buffer using an unbounded string copy. This can trigger a stack buffer overflow and cause file-roller to terminate, resulting in a denial of service. To exploit this flaw, a victim must open or extract the crafted archive using file-roller.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller&amp;#39;s progress-line parsing copies the path into a fixed-size stack buffer using an unbounded string copy. This can trigger a stack buffer overflow and cause file-roller to terminate, resulting in a denial of service. To exploit this flaw, a victim must open or extract the crafted archive using file-roller.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/ghsa-qgv9-pfrp-f7x5</guid>
    </item>
    <item>
      <title>OESA-2026-3803 — file-roller security update</title>
      <link>https://db.gcve.eu/vuln/oesa-2026-3803</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; openEuler:20.03-LTS-SP4: file-roller&lt;/p&gt;
&lt;p&gt;File Roller is an archive manager that you can create and modify archives; view the content of an archive;view and modify a file contained in the archive; extract files from the archive.&#13;
&#13;
Security Fix(es):&lt;/p&gt;
&lt;p&gt;A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller&amp;amp;apos;s progress-line parsing copies the path into a fixed-size stack buffer using an unbounded string copy. This can trigger a stack buffer overflow and cause file-roller to terminate, resulting in a denial of service. To exploit this flaw, a victim must open or extract the crafted archive using file-roller.(CVE-2026-78322)&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; openEuler:20.03-LTS-SP4: file-roller&lt;/p&gt;
&lt;p&gt;File Roller is an archive manager that you can create and modify archives; view the content of an archive;view and modify a file contained in the archive; extract files from the archive.&#13;
&#13;
Security Fix(es):&lt;/p&gt;
&lt;p&gt;A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller&amp;amp;apos;s progress-line parsing copies the path into a fixed-size stack buffer using an unbounded string copy. This can trigger a stack buffer overflow and cause file-roller to terminate, resulting in a denial of service. To exploit this flaw, a victim must open or extract the crafted archive using file-roller.(CVE-2026-78322)&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/oesa-2026-3803</guid>
    </item>
    <item>
      <title>openSUSE-SU-2026:21667-1 — Security update for file-roller</title>
      <link>https://db.gcve.eu/vuln/opensuse-su-2026:21667-1</link>
      <description>&lt;p&gt;Security update for file-roller&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Security update for file-roller&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/opensuse-su-2026:21667-1</guid>
    </item>
    <item>
      <title>SUSE-SU-2026:3960-1 — Security update for file-roller</title>
      <link>https://db.gcve.eu/vuln/suse-su-2026:3960-1</link>
      <description>&lt;p&gt;Security update for file-roller&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Security update for file-roller&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/suse-su-2026:3960-1</guid>
    </item>
    <item>
      <title>UBUNTU-CVE-2026-78322</title>
      <link>https://db.gcve.eu/vuln/ubuntu-cve-2026-78322</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:16.04:LTS: file-roller, Ubuntu:18.04:LTS: file-roller, Ubuntu:20.04:LTS: file-roller, Ubuntu:22.04:LTS: file-roller, Ubuntu:24.04:LTS: file-roller, Ubuntu:26.04:LTS: file-roller&lt;/p&gt;
&lt;p&gt;A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller&amp;#39;s progress-line parsing copies the path into a fixed-size stack buffer using an unbounded string copy. This can trigger a stack buffer overflow and cause file-roller to terminate, resulting in a denial of service. To exploit this flaw, a victim must open or extract the crafted archive using file-roller.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:16.04:LTS: file-roller, Ubuntu:18.04:LTS: file-roller, Ubuntu:20.04:LTS: file-roller, Ubuntu:22.04:LTS: file-roller, Ubuntu:24.04:LTS: file-roller, Ubuntu:26.04:LTS: file-roller&lt;/p&gt;
&lt;p&gt;A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller&amp;#39;s progress-line parsing copies the path into a fixed-size stack buffer using an unbounded string copy. This can trigger a stack buffer overflow and cause file-roller to terminate, resulting in a denial of service. To exploit this flaw, a victim must open or extract the crafted archive using file-roller.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/ubuntu-cve-2026-78322</guid>
    </item>
  </channel>
</rss>
