RHSA-2019:3698 — Red Hat Security Advisory: libarchive security and bug fix update

Fixed packages 13

Release	Package	Fixed in
Red Hat · RHEL 8 enterprise_linux:8::baseos	bsdcat-debuginfo	0:3.3.2-7.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	bsdcpio-debuginfo	0:3.3.2-7.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	bsdtar	0:3.3.2-7.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	bsdtar-debuginfo	0:3.3.2-7.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	libarchive	0:3.3.2-7.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	libarchive-debuginfo	0:3.3.2-7.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	libarchive-debugsource	0:3.3.2-7.el8
Red Hat · RHEL 8 enterprise_linux:8::crb	bsdcat-debuginfo	0:3.3.2-7.el8
Red Hat · RHEL 8 enterprise_linux:8::crb	bsdcpio-debuginfo	0:3.3.2-7.el8
Red Hat · RHEL 8 enterprise_linux:8::crb	bsdtar-debuginfo	0:3.3.2-7.el8
Red Hat · RHEL 8 enterprise_linux:8::crb	libarchive-debuginfo	0:3.3.2-7.el8
Red Hat · RHEL 8 enterprise_linux:8::crb	libarchive-debugsource	0:3.3.2-7.el8
Red Hat · RHEL 8 enterprise_linux:8::crb	libarchive-devel	0:3.3.2-7.el8

Unscored —

CVE-2017-14503

libarchive 3.3.2 suffers from an out-of-bounds read within lha_read_data_none() in archive_read_support_format_lha.c wh…

libarchive libarchive libarchive Debian Ubuntu Alpine

Sep 17, 2017
Unscored —

CVE-2018-1000877

libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-415:…

libarchive libarchive Debian Ubuntu

Dec 20, 2018
Unscored —

CVE-2018-1000878

libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-416:…

libarchive libarchive Debian Ubuntu

Dec 20, 2018
Unscored —

CVE-2019-1000019

libarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9a757c1 onwards (release v3.0.2 onwards) contains a CWE-125:…

libarchive libarchive Debian Ubuntu

Feb 4, 2019
Unscored —

CVE-2019-1000020

libarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb139961 onwards (version v2.8.0 onwards) contains a CWE-835:…

libarchive libarchive Debian Ubuntu

Feb 4, 2019

article
https://access.redhat.com/security/updates/classification/#moderate
article
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.1_release_notes/
report
https://bugzilla.redhat.com/show_bug.cgi?id=1494449
report
https://bugzilla.redhat.com/show_bug.cgi?id=1663887
report
https://bugzilla.redhat.com/show_bug.cgi?id=1663889
report
https://bugzilla.redhat.com/show_bug.cgi?id=1672888
report
https://bugzilla.redhat.com/show_bug.cgi?id=1672892
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3698.json
report
https://access.redhat.com/security/cve/CVE-2017-14503
advisory
https://www.cve.org/CVERecord?id=CVE-2017-14503
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-14503
report
https://access.redhat.com/security/cve/CVE-2018-1000877
advisory
https://www.cve.org/CVERecord?id=CVE-2018-1000877
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-1000877
report
https://access.redhat.com/security/cve/CVE-2018-1000878
advisory
https://www.cve.org/CVERecord?id=CVE-2018-1000878
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-1000878
report
https://access.redhat.com/security/cve/CVE-2019-1000019
advisory
https://www.cve.org/CVERecord?id=CVE-2019-1000019
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-1000019
report
https://access.redhat.com/security/cve/CVE-2019-1000020
advisory
https://www.cve.org/CVERecord?id=CVE-2019-1000020
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-1000020