libarchive is vulnerable to denial of service (DoS). It is possible due to use after free in RAR decoder.
lists.opensuse.org/opensuse-security-announce/2019-04/msg00055.html
www.securityfocus.com/bid/106324
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.7_release_notes/index
access.redhat.com/errata/RHSA-2019:2298
access.redhat.com/errata/RHSA-2019:3698
access.redhat.com/security/updates/classification/#moderate
bugs.launchpad.net/ubuntu/+source/libarchive/+bug/1794909
github.com/libarchive/libarchive/pull/1105
github.com/libarchive/libarchive/pull/1105/commits/bfcfe6f04ed20db2504db8a254d1f40a1d84eb28
lists.debian.org/debian-lts-announce/2018/12/msg00011.html
lists.fedoraproject.org/archives/list/[email protected]/message/CBOCC2M6YGPZA6US43YK4INPSJZZHRTG/
lists.fedoraproject.org/archives/list/[email protected]/message/W645KCLWFDBDGFJHG57WOVXGE62QSIJI/
lists.fedoraproject.org/archives/list/[email protected]/message/ZVXA7PHINVT6DFF6PRLTDTVTXKDLVHNF/
usn.ubuntu.com/3859-1/
www.debian.org/security/2018/dsa-4360