Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 6 enterprise_linux:6::client | libarchive | 0:2.8.3-7.el6_8 |
| Red Hat · RHEL 6 enterprise_linux:6::client | libarchive-debuginfo | 0:2.8.3-7.el6_8 |
| Red Hat · RHEL 6 enterprise_linux:6::client | libarchive-devel | 0:2.8.3-7.el6_8 |
| Red Hat · RHEL 6 enterprise_linux:6::computenode | libarchive | 0:2.8.3-7.el6_8 |
| Red Hat · RHEL 6 enterprise_linux:6::computenode | libarchive-debuginfo | 0:2.8.3-7.el6_8 |
| Red Hat · RHEL 6 enterprise_linux:6::computenode | libarchive-devel | 0:2.8.3-7.el6_8 |
| Red Hat · RHEL 6 enterprise_linux:6::server | libarchive | 0:2.8.3-7.el6_8 |
| Red Hat · RHEL 6 enterprise_linux:6::server | libarchive-debuginfo | 0:2.8.3-7.el6_8 |
| Red Hat · RHEL 6 enterprise_linux:6::server | libarchive-devel | 0:2.8.3-7.el6_8 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | libarchive | 0:2.8.3-7.el6_8 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | libarchive-debuginfo | 0:2.8.3-7.el6_8 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | libarchive-devel | 0:2.8.3-7.el6_8 |
Vulnerabilities 7
-
Unscored —
The _ar_read_header function in archive_read_support_format_ar.c in libarchive before 3.2.0 allows remote attackers to …
-
Unscored —CVE-2015-8921 EPSS 12%
The ae_strtofflags function in archive_entry.c in libarchive before 3.2.0 allows remote attackers to cause a denial of …
-
Unscored —
The compress_bidder_init function in archive_read_support_filter_compress.c in libarchive before 3.2.0 allows remote at…
-
Unscored —
The archive_read_format_cpio_read_header function in archive_read_support_format_cpio.c in libarchive before 3.2.1 allo…
-
Unscored —
The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which mi…
-
Unscored —
Integer overflow in the ISO parser in libarchive before 3.2.1 allows remote attackers to cause a denial of service (app…
-
Unscored —
libarchive before 3.2.0 does not limit the number of recursive decompressions, which allows remote attackers to cause a…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1347084
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1347086
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1348416
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1348772
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1348780
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1350280
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1362601
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1850.json
-
report
https://access.redhat.com/security/cve/CVE-2015-8920
-
advisory
https://www.cve.org/CVERecord?id=CVE-2015-8920
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2015-8920
-
report
https://access.redhat.com/security/cve/CVE-2015-8921
-
advisory
https://www.cve.org/CVERecord?id=CVE-2015-8921
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2015-8921
-
report
https://access.redhat.com/security/cve/CVE-2015-8932
-
advisory
https://www.cve.org/CVERecord?id=CVE-2015-8932
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2015-8932
-
report
https://access.redhat.com/security/cve/CVE-2016-4809
-
advisory
https://www.cve.org/CVERecord?id=CVE-2016-4809
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-4809
-
report
https://access.redhat.com/security/cve/CVE-2016-5418
-
advisory
https://www.cve.org/CVERecord?id=CVE-2016-5418
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-5418
-
article
http://seclists.org/oss-sec/2016/q3/255
-
report
https://access.redhat.com/security/cve/CVE-2016-5844
-
advisory
https://www.cve.org/CVERecord?id=CVE-2016-5844
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-5844
-
report
https://access.redhat.com/security/cve/CVE-2016-7166
-
advisory
https://www.cve.org/CVERecord?id=CVE-2016-7166
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-7166