Fedora: Security Advisory for xar (FEDORA-2020-bbd24dd0cf)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 30 : xar (2020-bbd24dd0cf)

The remote Fedora 30 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2020-bbd24dd0cf advisory. - Use Apple upstream instead of non-fresh Github one - New upstream in 1.8 dev branch with 417.1 subversion - Close CVE-2018-17093 - Close...

CVE-2018-17094

...

CVE-2018-17094

CVE-2018-17094 is a duplicate of CVE-2017-11124. The connected data identify the underlying issue as a NULL pointer dereference in xar_unserialize (archive.c) within libxar.so used by the xar package. Fedora advisories reference remediation by upgrading xar to a newer upstream: 1.8.x releases (ex...