3277 matches found
Important: libarchive
Issue Overview: archivereadformatrarreaddata in archivereadsupportformatrar.c in libarchive before 3.4.0 has a use-after-free in a certain ARCHIVEFAILED situation, related to Ppmd7DecodeSymbol. CVE-2019-18408 Affected Packages: libarchive Issue Correction: Run yum update libarchive or yum update...
Slackware 14.1 / 14.2 / current : libarchive (SSA:2020-043-01)
New libarchive packages are available for Slackware 14.1, 14.2, and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2020-043-01. The text itself is copyright C Slackware Linux,...
Photon OS 2.0: Libarchive PHSA-2020-2.0-0207
An update of the libarchive package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0207. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Critical Photon OS Security Update - PHSA-2020-0207
Updates of 'envoy', 'ansible', 'libarchive', 'nginx' packages of Photon OS have been released...
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0207
An update of 'envoy', 'nginx', 'libarchive', 'ansible' packages of Photon OS has been released...
[slackware-security] libarchive
New libarchive packages are available for Slackware 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/libarchive-3.4.2-i586-1slack14.2.txz: Upgraded. This update includes security fixes in the RAR5 reader. Security fix Where ...
CVE-2019-19221
In Libarchive 3.4.0, archivewstringappendfrommbs in archivestring.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive...
Amazon Linux 2 : libarchive (ALAS-2020-1391)
The version of libarchive installed on the remote host is prior to 3.1.2-14. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1391 advisory. archivereadformatrarreaddata in archivereadsupportformatrar.c in libarchive before 3.4.0 has a use-after-free in a certain...
Important Photon OS Security Update - PHSA-2020-0055
Updates of 'libarchive', 'sqlite', 'libxml2' packages of Photon OS have been released...
Photon OS 3.0: Libarchive PHSA-2020-3.0-0055
An update of the libarchive package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0055. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid133504;...
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-1.0-0272
An update of 'libxml2', 'libarchive', 'salt' packages of Photon OS has been released...
Important: libarchive
Issue Overview: archivereadformatrarreaddata in archivereadsupportformatrar.c in libarchive before 3.4.0 has a use-after-free in a certain ARCHIVEFAILED situation, related to Ppmd7DecodeSymbol. CVE-2019-18408 Affected Packages: libarchive Note: This advisory is applicable to Amazon Linux 2 AL2 Co...
Important Photon OS Security Update - PHSA-2020-3.0-0055
Updates of 'libarchive', 'libxml2', 'sqlite' packages of Photon OS have been released...
libarchive:libarchive_fuzzer: Heap-buffer-overflow in read_bits_16
Project: https://github.com/libarchive/libarchive.git Detailed Report: https://oss-fuzz.com/testcase?key=5135343248736256 Project: libarchive Fuzzing Engine: libFuzzer Fuzz Target: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...
RHEL 8 : libarchive (RHSA-2020:0271)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:0271 advisory. The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM...
CentOS 7 : libarchive (RHSA-2020:0203)
The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:0203 advisory. - archivereadformatrarreaddata in archivereadsupportformatrar.c in libarchive before 3.4.0 has a use-after-free in a certain ARCHIVEFAILED situation, related to...
Oracle Linux 8 : libarchive (ELSA-2020-0271)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0271 advisory. 3.3.2-8 - Fix CVE-2019-18408: RAR use-after-free Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...
libarchive: use-after-free in archive_read_format_rar_read_data when there is an error in the decompression of an archive entry
A use-after-free vulnerability was discovered in libarchive in the way it processes RAR archives when there is an error in one of the archive's entries. An application that accepts untrusted RAR archives may be vulnerable to this flaw, which could allow a remote attacker to cause a denial of...
Important: Red Hat Security Advisory: libarchive security update
An update for libarchive is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...
