Skip to content
openSUSE 7zip Important Denial Of Service Vulnern 2026-21038

openSUSE 7zip Important Denial Of Service Vulnern 2026-21038

Linuxsecurity LinuxSecurity Advisories June 30, 2026

- CVE-2026-48092: Information disclosure in 32-bit builds due to heap memory disclosure (bsc#1267858).

- CVE-2026-48095: Heap buffer overflow via NTFS compressed stream buffer under-allocation (bsc#1267421).

- CVE-2026-48101: Information Disclosure via uninitialized memory in UEFI capsule parser (bsc#1267859).

- CVE-2026-48102: Information disclosure and denial of service via crafted UDF image (bsc#1267860).

- CVE-2026-48103: off-by-one heap out-of-bounds read (bsc#1267861).

- CVE-2026-48104: Uninitialized heap read in SquashFS archive handler (bsc#1267862).

- CVE-2026-48111: off-by-one out-of-bounds read in ParseDepedencyExpression function (bsc#1267863).

- CVE-2026-48112: heap out-of-bounds read in BSD SYMDEF parser (bsc#1267864).

* linux version of 7-Zip can use huge pages (2 MB pages). It can

increase compression speed for 10% for 7z/xz/LZMA/LZMA2 compression.

* new -spo[d|c|r] switch specifies the...

- openSUSE Leap 16.0:

7zip-26.01-160000.1.1

*

*

*

*

*

*

*

*

Get the latest Linux and open source security news straight to your inbox.