ROS-20220322-02

A vulnerability in the libarchive archiving library is related to a symbolic link when extracting files from an
archive. Exploitation of the vulnerability could allow an attacker to create a specially crafted symbolic
link to a critical file on the system, place it in an archive, and change the modes, times, access control lists, and flags of the file outside of the archive.
access control lists and flags of the file outside the archive

The libarchive archiving library vulnerability involves referencing a symbolic link when retrieving
files from the archive, which could result in changing the ACL of the link target. Exploitation of the vulnerability could
allow an attacker to create a specially crafted archive, trick the victim into extracting files from it
and escalate privileges on the system