shield Security update for libarchive

SUSE-SLE-Module-Development-Tools-15-SP1-2019-3093

This update for libarchive fixes the following issues: Security issues fixed: - CVE-2018-1000877: Fixed a double free vulnerability in RAR decoder (bsc#1120653). - CVE-2018-1000878: Fixed a Use-After-Free vulnerability in RAR decoder (bsc#1120654). - CVE-2019-1000019: Fixed an Out-Of-Bounds Read vulnerability in 7zip decompression (bsc#1124341). - CVE-2019-1000020: Fixed an Infinite Loop vulnerability in ISO9660 parser (bsc#1124342). - CVE-2019-18408: Fixed a use-after-free in RAR format support (bsc#1155079).

• Release Date
  Nov 28 2019
• References
  Bugzilla: 1120653, 1120654, 1124341, 1124342, 1155079
  CVEs: CVE-2018-1000877, CVE-2018-1000878, CVE-2019-1000019, CVE-2019-1000020, CVE-2019-18408
• Type
  security
• Severity
  moderate

cloud_download Downloads

Development Tools Module 15.1 aarch64

• Packages
  bsdtar
  Creates and reads several different streaming archive formats

  3.3.2-3.11.1 lock rpm

  libarchive
  Creates and reads several different streaming archive formats

  3.3.2-3.11.1 lock src

Development Tools Module 15.1 ppc64le

• Packages
  bsdtar
  Creates and reads several different streaming archive formats

  3.3.2-3.11.1 lock rpm

  libarchive
  Creates and reads several different streaming archive formats

  3.3.2-3.11.1 lock src

Development Tools Module 15.1 s390x

• Packages
  bsdtar
  Creates and reads several different streaming archive formats

  3.3.2-3.11.1 lock rpm

  libarchive
  Creates and reads several different streaming archive formats

  3.3.2-3.11.1 lock src

Development Tools Module 15.1 x86_64

• Packages
  bsdtar
  Creates and reads several different streaming archive formats

  3.3.2-3.11.1 lock rpm

  libarchive
  Creates and reads several different streaming archive formats

  3.3.2-3.11.1 lock src