Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2021:3722-1

Опубликовано: 17 нояб. 2021
Источник: suse-cvrf

Описание

Security update for libarchive

This update for libarchive fixes the following issues:

  • CVE-2019-19221: Fixed out-of-bounds read caused by incorrect mbrtowc or mbtowc call (bsc#1157569)

  • backporting symlink security fixes from 3.5.2:

    • extracting with ACLs modifies ACLs of target (bsc#1192425)
    • modifies file flags of target (bsc#1192426)
    • avoid follow on fixup entries (bsc#1192427)

Список пакетов

SUSE Linux Enterprise Server 12 SP5
libarchive13-3.3.3-32.5.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
libarchive13-3.3.3-32.5.1
SUSE Linux Enterprise Software Development Kit 12 SP5
libarchive-devel-3.3.3-32.5.1

Ссылки

Описание

In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:libarchive13-3.3.3-32.5.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.3.3-32.5.1
SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.3.3-32.5.1
Ссылки