High ELSA-2020-0271 1 CVE

Important: libarchive security update (Oracle Linux 8)

Published Jan 29, 2020 · Updated Jan 29, 2020

Ecosystem: Oracle Linux

Summary

[3.3.2-8]
- Fix CVE-2019-18408: RAR use-after-free

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 8	bsdtar	0:3.3.2-8.el8_1
Oracle Linux · 8	libarchive	0:3.3.2-8.el8_1
Oracle Linux · 8	libarchive-devel	0:3.3.2-8.el8_1

Vulnerabilities 1

Unscored —

CVE-2019-18408

archive_read_format_rar_read_data in archive_read_support_format_rar.c in libarchive before 3.4.0 has a use-after-free …

libarchive libarchive libarchive Debian Ubuntu Alpine

Oct 24, 2019