ELSA-2016-1850

ELSA-2016-1850 - libarchive security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2016-09-12

Description

[2.8.3-7]
- Fixes variation of CVE-2016-5418: Hard links could include '..' in their path.

[2.8.3-6]
- Fixes CVE-2016-5418: Archive Entry with type 1 (hardlink) causes file overwrite (#1365774)

[2.8.3-5]
- enable testsuite
- CVE batch in summer 2016

Related CVEs

CVE-2015-8920

CVE-2015-8921

CVE-2015-8932

CVE-2016-4809

CVE-2016-5418

CVE-2016-5844

CVE-2016-7166

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 6 (i386)	libarchive-2.8.3-7.el6_8.src.rpm	7888424ca53e2498e38b0570529efbc3	-
	libarchive-2.8.3-7.el6_8.i686.rpm	49003cdf82227f84d550942e5b0f3db5	-
	libarchive-devel-2.8.3-7.el6_8.i686.rpm	8c59683fff71afc4beae53fe6ff6a2f5	-
Oracle Linux 6 (x86_64)	libarchive-2.8.3-7.el6_8.src.rpm	7888424ca53e2498e38b0570529efbc3	-
	libarchive-2.8.3-7.el6_8.i686.rpm	49003cdf82227f84d550942e5b0f3db5	-
	libarchive-2.8.3-7.el6_8.x86_64.rpm	f2511914e07a49c411a5c0aa0d5c9067	-
	libarchive-devel-2.8.3-7.el6_8.i686.rpm	8c59683fff71afc4beae53fe6ff6a2f5	-
	libarchive-devel-2.8.3-7.el6_8.x86_64.rpm	b363c162d00019fe11fba9bbee67b556	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team