Medium ELSA-2020-4443 1 CVE

Moderate: libarchive security update (Oracle Linux 8)

Published Nov 10, 2020 · Updated Nov 10, 2020

Ecosystem: Oracle Linux

Summary

[3.3.2-9]
- Fix out-of-bounds read (CVE-2019-19221) (#1803967)

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 8	bsdtar	0:3.3.2-9.el8
Oracle Linux · 8	libarchive	0:3.3.2-9.el8
Oracle Linux · 8	libarchive-devel	0:3.3.2-9.el8

Vulnerabilities 1

Unscored —

CVE-2019-19221

In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because of an incorr…

libarchive libarchive libarchive Debian Ubuntu Alpine

Nov 21, 2019