Opened 6 months ago

Closed 6 months ago

#23140 closed enhancement (fixed)

libarchive-3.8.7

Reported by: Bruce Dubbs Owned by: SecurityAdvisory
Priority: elevated Milestone: 13.1
Component: BOOK Version: git
Severity: medium Keywords:
Cc:

Description

New point version.

Change History (5)

comment:1 by Joe Locash, 6 months ago

Owner: changed from blfs-book to Joe Locash
Status: new → assigned

comment:2 by Joe Locash, 6 months ago

Priority: normal → elevated 
Libarchive 3.8.7 is a security and bugfix release.

Notable fixes:
    - CAB: fix NULL pointer dereference during skip (#2900)
    - CAB: Fix Heap OOB Write in CAB LZX decoder (#2919)
    - cpio: various fixes and improvements (#2899, #2908, #2910, #2939)
    - contrib/untar: fix out-of-bounds read (#2903)
    - iso9660: fix undefined behavior (#2897)
    - iso9660: fix posibble heap buffer overflow on 32-bit systems (#2934)v3.8.6...v3.8.7
    - libarchive: fix handling of option failures (#2871)
    - libarchive: do not continue with truncated numbers (#2911)
    - libarchive: lzop and grzip filter support (#2947)
    - RAR: fix LZSS window size mismatch after PPMd block (#2898)

Full Changelog: ​v3.8.6...v3.8.7

Fixed at 6d27865955. Leaving open for SA.

comment:3 by Joe Locash, 6 months ago

Owner: changed from Joe Locash to Douglas R. Reno
Status: assigned → new

comment:4 by Bruce Dubbs, 6 months ago

Owner: changed from Douglas R. Reno to SecurityAdvisory

comment:5 by Douglas R. Reno, 6 months ago

Resolution: → fixed
Status: new → closed

SA-13.0-046 issued

Note: See TracTickets for help on using tickets.