Red Hat Security Advisory

RHSA-2020:4443

libarchive security update

Released 2020-11-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 8) libarchive-devel-3.3.2-9.el8
Red Hat Enterprise Linux BaseOS (v. 8) bsdtar-3.3.2-9.el8, libarchive-3.3.2-9.el8

TI-2019-13851 CVE-2019-19221 · GHSA-m55v-6hqc-x3jh

LOW 26

In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00656 Published 2019-11-21 Partial fix CWE-125