This update for libarchive fixes the following issues :

Security issues fixed :

CVE-2018-1000877: Fixed a double free vulnerability in RAR decoder (bsc#1120653)

CVE-2018-1000878: Fixed a Use-After-Free vulnerability in RAR decoder (bsc#1120654)

CVE-2018-1000879: Fixed a NULL pointer Dereference vulnerability in ACL parser (bsc#1120656)

CVE-2018-1000880: Fixed an Improper Input Validation vulnerability in WARC parser (bsc#1120659)

CVE-2019-1000019: Fixed an Out-Of-Bounds Read vulnerability in 7zip decompression (bsc#1124341)

CVE-2019-1000020: Fixed an Infinite Loop vulnerability in ISO9660 parser (bsc#1124342)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for [CVE-2018-1000877 CVE-2018-1000878 CVE-2018-1000879 CVE-2018-1000880]

----

Applied various flaws from upsteam

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update of the libarchive package has been released.

This update for libarchive fixes the following issues :

Security issues fixed :

  - CVE-2018-1000877: Fixed a double free vulnerability in     RAR decoder (bsc#1120653)

  - CVE-2018-1000878: Fixed a Use-After-Free vulnerability     in RAR decoder (bsc#1120654)

  - CVE-2018-1000879: Fixed a NULL pointer Dereference     vulnerability in ACL parser (bsc#1120656)

  - CVE-2018-1000880: Fixed an Improper Input Validation     vulnerability in WARC parser (bsc#1120659)

  - CVE-2019-1000019: Fixed an Out-Of-Bounds Read     vulnerability in 7zip decompression (bsc#1124341) 

  - CVE-2019-1000020: Fixed an Infinite Loop vulnerability     in ISO9660 parser (bsc#1124342)

This update was imported from the SUSE:SLE-15:Update update project.

ID	Name	Product	Family	Published	Updated	Severity
123636	SUSE SLED15 / SLES15 Security Update : libarchive (SUSE-SU-2019:0831-1)	Nessus	SuSE Local Security Checks	4/2/2019	6/6/2024	high
123766	Fedora 28 : libarchive (2019-c595a93536)	Nessus	Fedora Local Security Checks	4/5/2019	6/5/2024	high
126114	Photon OS 3.0: Libarchive PHSA-2019-3.0-0015	Nessus	PhotonOS Local Security Checks	6/24/2019	7/24/2024	medium
124863	Photon OS 1.0: Libarchive PHSA-2019-1.0-0227	Nessus	PhotonOS Local Security Checks	5/14/2019	5/23/2024	medium
124557	Fedora 30 : libarchive (2019-fbe83d0e32)	Nessus	Fedora Local Security Checks	5/2/2019	5/29/2024	high
123098	Fedora 29 : libarchive (2019-0233ec0ff3)	Nessus	Fedora Local Security Checks	3/26/2019	6/12/2024	high
124051	openSUSE Security Update : libarchive (openSUSE-2019-1196)	Nessus	SuSE Local Security Checks	4/15/2019	6/3/2024	high
202887	Photon OS 2.0: Libarchive PHSA-2019-2.0-0161	Nessus	PhotonOS Local Security Checks	7/22/2024	7/22/2024	medium

Detections

Analytics

Plugins Search

high

high

medium

medium

high

high

high

medium