Red Hat Security AdvisoryRHSA-2020:0203
libarchive security update
Released 2020-01-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libarchive-3.1.2-14.el7_7
- Red Hat Enterprise Linux Client Optional (v. 7) bsdcpio-3.1.2-14.el7_7, bsdtar-3.1.2-14.el7_7, libarchive-devel-3.1.2-14.el7_7
- Red Hat Enterprise Linux ComputeNode (v. 7) libarchive-3.1.2-14.el7_7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) bsdcpio-3.1.2-14.el7_7, bsdtar-3.1.2-14.el7_7, libarchive-devel-3.1.2-14.el7_7
- Red Hat Enterprise Linux Server (v. 7) libarchive-3.1.2-14.el7_7, libarchive-3.1.2-14.el7_7.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) bsdcpio-3.1.2-14.el7_7, bsdtar-3.1.2-14.el7_7, libarchive-devel-3.1.2-14.el7_7 +1
- Red Hat Enterprise Linux Workstation (v. 7) libarchive-3.1.2-14.el7_7
- Red Hat Enterprise Linux Workstation Optional (v. 7) bsdcpio-3.1.2-14.el7_7, bsdtar-3.1.2-14.el7_7, libarchive-devel-3.1.2-14.el7_7
Fixes 1 record
Priority MEDIUM 40
archive_read_format_rar_read_data in archive_read_support_format_rar.c in libarchive before 3.4.0 has a use-after-free in a certain ARCHIVE_FAILED situation, related to Ppmd7_DecodeSymbol.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0404 · Published 2019-10-24 · Fixed CWE-416
