ELSA-2020-0203

Опубликовано: 22 янв. 2020

Источник: oracle-oval

Платформа: Oracle Linux 7

Описание

ELSA-2020-0203: libarchive security update (IMPORTANT)

[3.1.2-14]

Fix patch application error

[3.1.2-13]

Fix CVE-2019-18408: RAR use-after-free

Обновленные пакеты

Oracle Linux 7

Oracle Linux aarch64

bsdcpio

3.1.2-14.el7_7

bsdtar

3.1.2-14.el7_7

libarchive

3.1.2-14.el7_7

libarchive-devel

3.1.2-14.el7_7

Oracle Linux x86_64

bsdcpio

3.1.2-14.el7_7

bsdtar

3.1.2-14.el7_7

libarchive

3.1.2-14.el7_7

libarchive-devel

3.1.2-14.el7_7

Связанные CVE

CVE-2019-18408

Ссылки на источники

Связанные уязвимости

CVE-2019-18408

CVSS3: 7.5

ubuntu

больше 6 лет назад

archive_read_format_rar_read_data in archive_read_support_format_rar.c in libarchive before 3.4.0 has a use-after-free in a certain ARCHIVE_FAILED situation, related to Ppmd7_DecodeSymbol.

CVE-2019-18408

CVSS3: 8.1

redhat

больше 6 лет назад

archive_read_format_rar_read_data in archive_read_support_format_rar.c in libarchive before 3.4.0 has a use-after-free in a certain ARCHIVE_FAILED situation, related to Ppmd7_DecodeSymbol.

CVE-2019-18408

CVSS3: 7.5

nvd

больше 6 лет назад

archive_read_format_rar_read_data in archive_read_support_format_rar.c in libarchive before 3.4.0 has a use-after-free in a certain ARCHIVE_FAILED situation, related to Ppmd7_DecodeSymbol.

CVE-2019-18408

CVSS3: 7.5

debian

больше 6 лет назад

archive_read_format_rar_read_data in archive_read_support_format_rar.c ...

GHSA-4hj2-55w3-4qwh

CVSS3: 7.5

github

больше 3 лет назад

archive_read_format_rar_read_data in archive_read_support_format_rar.c in libarchive before 3.4.0 has a use-after-free in a certain ARCHIVE_FAILED situation, related to Ppmd7_DecodeSymbol.