< back to search

shield Security update for libarchive

SUSE-SLE-Module-Development-Tools-15-SP4-2022-1930

This update for libarchive fixes the following issues: - CVE-2022-26280: Fixed out-of-bounds read via the component zipx_lzma_alone_init (bsc#1197634). - CVE-2021-36976: Fixed use-after-free in copy_string (called from do_uncompress_block and process_block) (bsc#1188572). - CVE-2017-5601: Fixed out-of-bounds memory access preventing denial-of-service (bsc#1197634, bsc#1189528).

Release Date

Jun 2 2022
References

Bugzilla: 1189528, 1197634, 1022528, 1188572
CVEs: CVE-2021-36976, CVE-2017-5601, CVE-2022-26280
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Development Tools Module 15.4 aarch64

Packages

bsdtar
Utility to read several different streaming archive formats

3.5.1-150400.3.3.1 lock rpm

libarchive
Utility and C library to create and read several different streaming archive formats

3.5.1-150400.3.3.1 lock src

Development Tools Module 15.4 ppc64le

Packages

bsdtar
Utility to read several different streaming archive formats

3.5.1-150400.3.3.1 lock rpm

libarchive
Utility and C library to create and read several different streaming archive formats

3.5.1-150400.3.3.1 lock src

Development Tools Module 15.4 s390x

Packages

bsdtar
Utility to read several different streaming archive formats

3.5.1-150400.3.3.1 lock rpm

libarchive
Utility and C library to create and read several different streaming archive formats

3.5.1-150400.3.3.1 lock src

Development Tools Module 15.4 x86_64

Packages

bsdtar
Utility to read several different streaming archive formats

3.5.1-150400.3.3.1 lock rpm

libarchive
Utility and C library to create and read several different streaming archive formats

3.5.1-150400.3.3.1 lock src