Lucene search

K
mageiaGentoo FoundationMGASA-2020-0127
HistoryMar 06, 2020 - 7:13 p.m.

Updated libarchive packages fix security vulnerabilities

2020-03-0619:13:58
Gentoo Foundation
advisories.mageia.org
14

0.005 Low

EPSS

Percentile

76.6%

The updated packages fix several issues including security vulnerabilities: In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive. (CVE-2019-19221) archive_read_support_format_rar5.c in libarchive before 3.4.2 attempts to unpack a RAR5 file with an invalid or corrupted header (such as a header size of zero), leading to a SIGSEGV or possibly unspecified other impact. (CVE-2020-9308)

OSVersionArchitecturePackageVersionFilename
Mageia7noarchlibarchive< 3.4.0-1.1libarchive-3.4.0-1.1.mga7