Unscored RHSA-2020:0246 1 CVE

Red Hat Security Advisory: libarchive security update

Published Sep 16, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 7

Release	Package	Fixed in
Red Hat · RHEL 8.0 E4S rhel_e4s:8.0::baseos	bsdcat-debuginfo	0:3.3.2-4.el8_0
Red Hat · RHEL 8.0 E4S rhel_e4s:8.0::baseos	bsdcpio-debuginfo	0:3.3.2-4.el8_0
Red Hat · RHEL 8.0 E4S rhel_e4s:8.0::baseos	bsdtar	0:3.3.2-4.el8_0
Red Hat · RHEL 8.0 E4S rhel_e4s:8.0::baseos	bsdtar-debuginfo	0:3.3.2-4.el8_0
Red Hat · RHEL 8.0 E4S rhel_e4s:8.0::baseos	libarchive	0:3.3.2-4.el8_0
Red Hat · RHEL 8.0 E4S rhel_e4s:8.0::baseos	libarchive-debuginfo	0:3.3.2-4.el8_0
Red Hat · RHEL 8.0 E4S rhel_e4s:8.0::baseos	libarchive-debugsource	0:3.3.2-4.el8_0

Vulnerabilities 1

Unscored —

CVE-2019-18408

archive_read_format_rar_read_data in archive_read_support_format_rar.c in libarchive before 3.4.0 has a use-after-free …

libarchive libarchive libarchive Debian Ubuntu Alpine

Oct 24, 2019

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=1769979
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0246.json
report
https://access.redhat.com/security/cve/CVE-2019-18408
advisory
https://www.cve.org/CVERecord?id=CVE-2019-18408
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-18408