< back to search

shield Security update for libarchive

SUSE-SLE-SERVER-12-2015-155

libarchive was updated to fix a directory traversal in the bsdcpio tool, which allowed attackers supplying crafted archives to overwrite files. (CVE-2015-2304) Also, a integer overflow was fixed that could also overflow buffers. (CVE-2013-0211)

Release Date

Mar 16 2015
References

Bugzilla: 920870, 800024
CVEs: CVE-2013-0211, CVE-2015-2304
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Server for SAP Applications 12 x86_64

Packages

libarchive
Creates and reads several different streaming archive formats

3.1.2-9.1 lock src

libarchive13
Library to work with several different streaming archive formats

3.1.2-9.1 lock rpm

SUSE Linux Enterprise Server 12 s390x

Packages

libarchive
Creates and reads several different streaming archive formats

3.1.2-9.1 lock src

libarchive13
Library to work with several different streaming archive formats

3.1.2-9.1 lock rpm

SUSE Linux Enterprise Server 12 ppc64le

Packages

libarchive
Creates and reads several different streaming archive formats

3.1.2-9.1 lock src

libarchive13
Library to work with several different streaming archive formats

3.1.2-9.1 lock rpm