RHSA-2019:2298 — Red Hat Security Advisory: libarchive security update

Fixed packages 20

Release	Package	Fixed in
Red Hat · RHEL 7 enterprise_linux:7::client	bsdcpio	0:3.1.2-12.el7
Red Hat · RHEL 7 enterprise_linux:7::client	bsdtar	0:3.1.2-12.el7
Red Hat · RHEL 7 enterprise_linux:7::client	libarchive	0:3.1.2-12.el7
Red Hat · RHEL 7 enterprise_linux:7::client	libarchive-debuginfo	0:3.1.2-12.el7
Red Hat · RHEL 7 enterprise_linux:7::client	libarchive-devel	0:3.1.2-12.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	bsdcpio	0:3.1.2-12.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	bsdtar	0:3.1.2-12.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	libarchive	0:3.1.2-12.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	libarchive-debuginfo	0:3.1.2-12.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	libarchive-devel	0:3.1.2-12.el7
Red Hat · RHEL 7 enterprise_linux:7::server	bsdcpio	0:3.1.2-12.el7
Red Hat · RHEL 7 enterprise_linux:7::server	bsdtar	0:3.1.2-12.el7
Red Hat · RHEL 7 enterprise_linux:7::server	libarchive	0:3.1.2-12.el7
Red Hat · RHEL 7 enterprise_linux:7::server	libarchive-debuginfo	0:3.1.2-12.el7
Red Hat · RHEL 7 enterprise_linux:7::server	libarchive-devel	0:3.1.2-12.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	bsdcpio	0:3.1.2-12.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	bsdtar	0:3.1.2-12.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	libarchive	0:3.1.2-12.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	libarchive-debuginfo	0:3.1.2-12.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	libarchive-devel	0:3.1.2-12.el7

Unscored —

CVE-2017-14503

libarchive 3.3.2 suffers from an out-of-bounds read within lha_read_data_none() in archive_read_support_format_lha.c wh…

libarchive libarchive libarchive Debian Ubuntu Alpine

Sep 17, 2017
Unscored —

CVE-2018-1000877

libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-415:…

libarchive libarchive Debian Ubuntu

Dec 20, 2018
Unscored —

CVE-2018-1000878

libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-416:…

libarchive libarchive Debian Ubuntu

Dec 20, 2018
Unscored —

CVE-2019-1000019

libarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9a757c1 onwards (release v3.0.2 onwards) contains a CWE-125:…

libarchive libarchive Debian Ubuntu

Feb 4, 2019
Unscored —

CVE-2019-1000020

libarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb139961 onwards (version v2.8.0 onwards) contains a CWE-835:…

libarchive libarchive Debian Ubuntu

Feb 4, 2019

article
https://access.redhat.com/security/updates/classification/#moderate
article
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.7_release_notes/index
report
https://bugzilla.redhat.com/show_bug.cgi?id=1494449
report
https://bugzilla.redhat.com/show_bug.cgi?id=1663887
report
https://bugzilla.redhat.com/show_bug.cgi?id=1663889
report
https://bugzilla.redhat.com/show_bug.cgi?id=1672888
report
https://bugzilla.redhat.com/show_bug.cgi?id=1672892
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2298.json
report
https://access.redhat.com/security/cve/CVE-2017-14503
advisory
https://www.cve.org/CVERecord?id=CVE-2017-14503
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-14503
report
https://access.redhat.com/security/cve/CVE-2018-1000877
advisory
https://www.cve.org/CVERecord?id=CVE-2018-1000877
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-1000877
report
https://access.redhat.com/security/cve/CVE-2018-1000878
advisory
https://www.cve.org/CVERecord?id=CVE-2018-1000878
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-1000878
report
https://access.redhat.com/security/cve/CVE-2019-1000019
advisory
https://www.cve.org/CVERecord?id=CVE-2019-1000019
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-1000019
report
https://access.redhat.com/security/cve/CVE-2019-1000020
advisory
https://www.cve.org/CVERecord?id=CVE-2019-1000020
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-1000020