--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-22a20c457f
2017-08-07 13:50:48.643546
--------------------------------------------------------------------------------
Name : libarchive3
Product : Fedora EPEL 6
Version : 3.3.1
Release : 1.el6
URL :
http://www.libarchive.org/
Summary : A library for handling streaming archive formats
Description :
Libarchive is a programming library that can create and read several different
streaming archive formats, including most popular tar variants, several cpio
formats, and both BSD and GNU ar variants. It can also write shar archives and
read ISO9660 CDROM images and ZIP archives.
--------------------------------------------------------------------------------
Update Information:
- Update to 3.3.1 - Drop obsolete patches
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1449532 - CVE-2016-10349 CVE-2016-10350 libarchive3: various flaws [epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=1449532
[ 2 ] Bug #1439704 - CVE-2016-10209 libarchive3: libarchive: NULL pointer dereference in
archive_wstring_append_from_mbs function [epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=1439704
[ 3 ] Bug #1417917 - CVE-2017-5601 libarchive: Out of bounds read in
lha_read_file_header_1() function [epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=1417917
[ 4 ] Bug #1385676 - CVE-2016-8687 CVE-2016-8688 CVE-2016-8689 libarchive3: various
flaws [epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=1385676
[ 5 ] Bug #1375280 - CVE-2016-5418 libarchive3: libarchive: Archive Entry with type 1
(hardlink), but has a non-zero data size file overwrite [epel-6]
https://bugzilla.redhat.com/show_bug.cgi?id=1375280
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libarchive3' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------