libarchive-3.3.3-5.el8
エラータID: AXSA:2023-5565:02
The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.
Security Fix(es):
* libarchive: NULL pointer dereference in archive_write.c (CVE-2022-36227)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVE-2022-36227
In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference. NOTE: the discoverer cites this CWE-476 remark but third parties dispute the code-execution impact: "In rare circumstances, when NULL is equivalent to the 0x0 memory address and privileged code can access it, then writing or reading memory is possible, which may lead to code execution."
Update packages.
In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference. NOTE: the discoverer cites this CWE-476 remark but third parties dispute the code-execution impact: "In rare circumstances, when NULL is equivalent to the 0x0 memory address and privileged code can access it, then writing or reading memory is possible, which may lead to code execution."
N/A
SRPMS
- libarchive-3.3.3-5.el8.src.rpm
MD5: 1a94dba2c86900b09e8fa9d3809b385c
SHA-256: 127da8d66fe1c9ea16e42195b34d4d38ae1898c61ff0ec4de8d8b1598f338626
Size: 6.26 MB
Asianux Server 8 for x86_64
- bsdtar-3.3.3-5.el8.x86_64.rpm
MD5: 2e539f8a258cbd5910e8aa0a4d0db54b
SHA-256: 7fa4109753fc671069de5c7af0916c51f5e6d941e540183ebff473cd79d01bc6
Size: 69.87 kB - libarchive-3.3.3-5.el8.i686.rpm
MD5: 0414a40903db08359f45f5fc063f9b25
SHA-256: 5b816b166890fbbf6e40fe19b462b6cfb587eb44e5de01a4823638489c499757
Size: 400.21 kB - libarchive-3.3.3-5.el8.x86_64.rpm
MD5: db9d4115d7de6b3ece7d03555e779dd9
SHA-256: 4b97cb8318fda206f1b31b6eaa0b227a27d82260d9eb8b36d860fa2d2e0fcc7d
Size: 358.94 kB - libarchive-devel-3.3.3-5.el8.i686.rpm
MD5: 90b8ea8d025a33668eebcf4c98038c8f
SHA-256: 64203ce565dff6621d2a0c4a6c1fc87d143bcd3cb7e23d86dc613536f360faff
Size: 130.73 kB - libarchive-devel-3.3.3-5.el8.x86_64.rpm
MD5: 3e784d9198d40a3880b75abd42094506
SHA-256: b8a1c8e6062cc0142152773bfcb62cabe6cd8ef8bcfd4b80a0612c014c5f72bb
Size: 130.71 kB