High ELSA-2020-0203 1 CVE

Important: libarchive security update (Oracle Linux 7)

Published Jan 22, 2020 · Updated Jan 22, 2020

Ecosystem: Oracle Linux

Summary

[3.1.2-14]
- Fix patch application error

[3.1.2-13]
- Fix CVE-2019-18408: RAR use-after-free

Fixed packages 4

Release	Package	Fixed in
Oracle Linux · 7	bsdcpio	0:3.1.2-14.el7_7
Oracle Linux · 7	bsdtar	0:3.1.2-14.el7_7
Oracle Linux · 7	libarchive	0:3.1.2-14.el7_7
Oracle Linux · 7	libarchive-devel	0:3.1.2-14.el7_7

Vulnerabilities 1

Unscored —

CVE-2019-18408

archive_read_format_rar_read_data in archive_read_support_format_rar.c in libarchive before 3.4.0 has a use-after-free …

libarchive libarchive libarchive Debian Ubuntu Alpine

Oct 24, 2019