Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2019-1000020 (GCVE-0-2019-1000020)
Vulnerability from cvelistv5 – Published: 2019-02-04 21:00 – Updated: 2024-08-05 03:00- n/a
| URL | Tags |
|---|---|
| https://github.com/libarchive/libarchive/pull/1120 | x_refsource_MISC |
| https://usn.ubuntu.com/3884-1/ | vendor-advisoryx_refsource_UBUNTU |
| https://lists.debian.org/debian-lts-announce/2019… | mailing-listx_refsource_MLIST |
| https://github.com/libarchive/libarchive/pull/112… | x_refsource_MISC |
| https://lists.fedoraproject.org/archives/list/pac… | vendor-advisoryx_refsource_FEDORA |
| https://lists.fedoraproject.org/archives/list/pac… | vendor-advisoryx_refsource_FEDORA |
| http://lists.opensuse.org/opensuse-security-annou… | vendor-advisoryx_refsource_SUSE |
| https://access.redhat.com/errata/RHSA-2019:2298 | vendor-advisoryx_refsource_REDHAT |
| https://access.redhat.com/errata/RHSA-2019:3698 | vendor-advisoryx_refsource_REDHAT |
| http://lists.opensuse.org/opensuse-security-annou… | vendor-advisoryx_refsource_SUSE |
| http://lists.opensuse.org/opensuse-security-annou… | vendor-advisoryx_refsource_SUSE |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T03:00:19.261Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/libarchive/libarchive/pull/1120"
},
{
"name": "USN-3884-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://usn.ubuntu.com/3884-1/"
},
{
"name": "[debian-lts-announce] 20190207 [SECURITY] [DLA 1668-1] libarchive security update",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2019/02/msg00013.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/libarchive/libarchive/pull/1120/commits/8312eaa576014cd9b965012af51bc1f967b12423"
},
{
"name": "FEDORA-2019-0233ec0ff3",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZVXA7PHINVT6DFF6PRLTDTVTXKDLVHNF/"
},
{
"name": "FEDORA-2019-c595a93536",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CBOCC2M6YGPZA6US43YK4INPSJZZHRTG/"
},
{
"name": "openSUSE-SU-2019:1196",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00055.html"
},
{
"name": "RHSA-2019:2298",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2298"
},
{
"name": "RHSA-2019:3698",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:3698"
},
{
"name": "openSUSE-SU-2019:2615",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00012.html"
},
{
"name": "openSUSE-SU-2019:2632",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00015.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"dateAssigned": "2019-01-22T00:00:00.000Z",
"datePublic": "2019-02-04T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "libarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb139961 onwards (version v2.8.0 onwards) contains a CWE-835: Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027) vulnerability in ISO9660 parser, archive_read_support_format_iso9660.c, read_CE()/parse_rockridge() that can result in DoS by infinite loop. This attack appears to be exploitable via the victim opening a specially crafted ISO9660 file."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2019-12-04T00:06:09.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/libarchive/libarchive/pull/1120"
},
{
"name": "USN-3884-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://usn.ubuntu.com/3884-1/"
},
{
"name": "[debian-lts-announce] 20190207 [SECURITY] [DLA 1668-1] libarchive security update",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.debian.org/debian-lts-announce/2019/02/msg00013.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/libarchive/libarchive/pull/1120/commits/8312eaa576014cd9b965012af51bc1f967b12423"
},
{
"name": "FEDORA-2019-0233ec0ff3",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZVXA7PHINVT6DFF6PRLTDTVTXKDLVHNF/"
},
{
"name": "FEDORA-2019-c595a93536",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CBOCC2M6YGPZA6US43YK4INPSJZZHRTG/"
},
{
"name": "openSUSE-SU-2019:1196",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00055.html"
},
{
"name": "RHSA-2019:2298",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2298"
},
{
"name": "RHSA-2019:3698",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:3698"
},
{
"name": "openSUSE-SU-2019:2615",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00012.html"
},
{
"name": "openSUSE-SU-2019:2632",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00015.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"DATE_ASSIGNED": "2019-01-22T21:21:10.026263",
"DATE_REQUESTED": "2019-01-17T03:09:42",
"ID": "CVE-2019-1000020",
"REQUESTER": "dja@axtens.net",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "libarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb139961 onwards (version v2.8.0 onwards) contains a CWE-835: Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027) vulnerability in ISO9660 parser, archive_read_support_format_iso9660.c, read_CE()/parse_rockridge() that can result in DoS by infinite loop. This attack appears to be exploitable via the victim opening a specially crafted ISO9660 file."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://github.com/libarchive/libarchive/pull/1120",
"refsource": "MISC",
"url": "https://github.com/libarchive/libarchive/pull/1120"
},
{
"name": "USN-3884-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/3884-1/"
},
{
"name": "[debian-lts-announce] 20190207 [SECURITY] [DLA 1668-1] libarchive security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2019/02/msg00013.html"
},
{
"name": "https://github.com/libarchive/libarchive/pull/1120/commits/8312eaa576014cd9b965012af51bc1f967b12423",
"refsource": "MISC",
"url": "https://github.com/libarchive/libarchive/pull/1120/commits/8312eaa576014cd9b965012af51bc1f967b12423"
},
{
"name": "FEDORA-2019-0233ec0ff3",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZVXA7PHINVT6DFF6PRLTDTVTXKDLVHNF/"
},
{
"name": "FEDORA-2019-c595a93536",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CBOCC2M6YGPZA6US43YK4INPSJZZHRTG/"
},
{
"name": "openSUSE-SU-2019:1196",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00055.html"
},
{
"name": "RHSA-2019:2298",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:2298"
},
{
"name": "RHSA-2019:3698",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:3698"
},
{
"name": "openSUSE-SU-2019:2615",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00012.html"
},
{
"name": "openSUSE-SU-2019:2632",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00015.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2019-1000020",
"datePublished": "2019-02-04T21:00:00.000Z",
"dateReserved": "2019-01-17T00:00:00.000Z",
"dateUpdated": "2024-08-05T03:00:19.261Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2019-1000020",
"date": "2026-05-31",
"epss": "0.00903",
"percentile": "0.76045"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2019-1000020\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2019-02-04T21:29:01.457\",\"lastModified\":\"2024-11-21T04:17:41.660\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"libarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb139961 onwards (version v2.8.0 onwards) contains a CWE-835: Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027) vulnerability in ISO9660 parser, archive_read_support_format_iso9660.c, read_CE()/parse_rockridge() that can result in DoS by infinite loop. This attack appears to be exploitable via the victim opening a specially crafted ISO9660 file.\"},{\"lang\":\"es\",\"value\":\"libarchive, en versiones desde el commit con ID 5a98dcf8a86364b3c2c469c85b93647dfb139961 (desde la versi\u00f3n v2.8.0) contiene una vulnerabilidad CWE-835: bucle con condici\u00f3n de salida inalcanzable (bucle infinito) en el analizador ISO9660, archive_read_support_format_iso9660.c, read_CE()/parse_rockridge() que puede resultar en una denegaci\u00f3n de servicio (DoS) por bucle infinito. El ataque parece ser explotable si una v\u00edctima abre un archivo ISO9660 especialmente manipulado.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:N/I:N/A:P\",\"baseScore\":4.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-835\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.8.0\",\"versionEndExcluding\":\"3.4.0\",\"matchCriteriaId\":\"744B6C2D-C8DD-4D53-BBE2-6F7A2376DC5B\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"B5A6F2F3-4894-4392-8296-3B8DD2679084\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07C312A0-CD2C-4B9C-B064-6409B25C278F\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D100F7CE-FC64-4CC6-852A-6136D72DA419\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F1E78106-58E6-4D59-990F-75DA575BFAD9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"33C068A4-3780-4EAB-A937-6082DF847564\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"51EF4996-72F4-4FA4-814F-F5991E7A8318\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"825ECE2D-E232-46E0-A047-074B34DB1E97\"}]}]}],\"references\":[{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00055.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00012.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00015.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2298\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:3698\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://github.com/libarchive/libarchive/pull/1120\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://github.com/libarchive/libarchive/pull/1120/commits/8312eaa576014cd9b965012af51bc1f967b12423\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2019/02/msg00013.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CBOCC2M6YGPZA6US43YK4INPSJZZHRTG/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZVXA7PHINVT6DFF6PRLTDTVTXKDLVHNF/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://usn.ubuntu.com/3884-1/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00055.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00012.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00015.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2298\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:3698\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://github.com/libarchive/libarchive/pull/1120\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://github.com/libarchive/libarchive/pull/1120/commits/8312eaa576014cd9b965012af51bc1f967b12423\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2019/02/msg00013.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CBOCC2M6YGPZA6US43YK4INPSJZZHRTG/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZVXA7PHINVT6DFF6PRLTDTVTXKDLVHNF/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://usn.ubuntu.com/3884-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}"
}
}
SUSE-SU-2019:0831-1
Vulnerability from csaf_suse - Published: 2019-04-01 11:58 - Updated: 2019-04-01 11:58| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.x86_64 | — |
Vendor Fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for libarchive",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for libarchive fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-1000877: Fixed a double free vulnerability in RAR decoder (bsc#1120653)\n- CVE-2018-1000878: Fixed a Use-After-Free vulnerability in RAR decoder (bsc#1120654)\n- CVE-2018-1000879: Fixed a NULL Pointer Dereference vulnerability in ACL parser (bsc#1120656)\n- CVE-2018-1000880: Fixed an Improper Input Validation vulnerability in WARC parser (bsc#1120659)\n- CVE-2019-1000019: Fixed an Out-Of-Bounds Read vulnerability in 7zip decompression (bsc#1124341) \n- CVE-2019-1000020: Fixed an Infinite Loop vulnerability in ISO9660 parser (bsc#1124342)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2019-831,SUSE-SLE-Module-Basesystem-15-2019-831,SUSE-SLE-Module-Development-Tools-15-2019-831",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_0831-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2019:0831-1",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20190831-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2019:0831-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2019-April/005278.html"
},
{
"category": "self",
"summary": "SUSE Bug 1120653",
"url": "https://bugzilla.suse.com/1120653"
},
{
"category": "self",
"summary": "SUSE Bug 1120654",
"url": "https://bugzilla.suse.com/1120654"
},
{
"category": "self",
"summary": "SUSE Bug 1120656",
"url": "https://bugzilla.suse.com/1120656"
},
{
"category": "self",
"summary": "SUSE Bug 1120659",
"url": "https://bugzilla.suse.com/1120659"
},
{
"category": "self",
"summary": "SUSE Bug 1124341",
"url": "https://bugzilla.suse.com/1124341"
},
{
"category": "self",
"summary": "SUSE Bug 1124342",
"url": "https://bugzilla.suse.com/1124342"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1000877 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1000877/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1000878 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1000878/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1000879 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1000879/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1000880 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1000880/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-1000019 page",
"url": "https://www.suse.com/security/cve/CVE-2019-1000019/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-1000020 page",
"url": "https://www.suse.com/security/cve/CVE-2019-1000020/"
}
],
"title": "Security update for libarchive",
"tracking": {
"current_release_date": "2019-04-01T11:58:49Z",
"generator": {
"date": "2019-04-01T11:58:49Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2019:0831-1",
"initial_release_date": "2019-04-01T11:58:49Z",
"revision_history": [
{
"date": "2019-04-01T11:58:49Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "bsdtar-3.3.2-3.8.4.aarch64",
"product": {
"name": "bsdtar-3.3.2-3.8.4.aarch64",
"product_id": "bsdtar-3.3.2-3.8.4.aarch64"
}
},
{
"category": "product_version",
"name": "libarchive-devel-3.3.2-3.8.4.aarch64",
"product": {
"name": "libarchive-devel-3.3.2-3.8.4.aarch64",
"product_id": "libarchive-devel-3.3.2-3.8.4.aarch64"
}
},
{
"category": "product_version",
"name": "libarchive13-3.3.2-3.8.4.aarch64",
"product": {
"name": "libarchive13-3.3.2-3.8.4.aarch64",
"product_id": "libarchive13-3.3.2-3.8.4.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libarchive13-64bit-3.3.2-3.8.4.aarch64_ilp32",
"product": {
"name": "libarchive13-64bit-3.3.2-3.8.4.aarch64_ilp32",
"product_id": "libarchive13-64bit-3.3.2-3.8.4.aarch64_ilp32"
}
}
],
"category": "architecture",
"name": "aarch64_ilp32"
},
{
"branches": [
{
"category": "product_version",
"name": "bsdtar-3.3.2-3.8.4.i586",
"product": {
"name": "bsdtar-3.3.2-3.8.4.i586",
"product_id": "bsdtar-3.3.2-3.8.4.i586"
}
},
{
"category": "product_version",
"name": "libarchive-devel-3.3.2-3.8.4.i586",
"product": {
"name": "libarchive-devel-3.3.2-3.8.4.i586",
"product_id": "libarchive-devel-3.3.2-3.8.4.i586"
}
},
{
"category": "product_version",
"name": "libarchive13-3.3.2-3.8.4.i586",
"product": {
"name": "libarchive13-3.3.2-3.8.4.i586",
"product_id": "libarchive13-3.3.2-3.8.4.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "bsdtar-3.3.2-3.8.4.ppc64le",
"product": {
"name": "bsdtar-3.3.2-3.8.4.ppc64le",
"product_id": "bsdtar-3.3.2-3.8.4.ppc64le"
}
},
{
"category": "product_version",
"name": "libarchive-devel-3.3.2-3.8.4.ppc64le",
"product": {
"name": "libarchive-devel-3.3.2-3.8.4.ppc64le",
"product_id": "libarchive-devel-3.3.2-3.8.4.ppc64le"
}
},
{
"category": "product_version",
"name": "libarchive13-3.3.2-3.8.4.ppc64le",
"product": {
"name": "libarchive13-3.3.2-3.8.4.ppc64le",
"product_id": "libarchive13-3.3.2-3.8.4.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "bsdtar-3.3.2-3.8.4.s390x",
"product": {
"name": "bsdtar-3.3.2-3.8.4.s390x",
"product_id": "bsdtar-3.3.2-3.8.4.s390x"
}
},
{
"category": "product_version",
"name": "libarchive-devel-3.3.2-3.8.4.s390x",
"product": {
"name": "libarchive-devel-3.3.2-3.8.4.s390x",
"product_id": "libarchive-devel-3.3.2-3.8.4.s390x"
}
},
{
"category": "product_version",
"name": "libarchive13-3.3.2-3.8.4.s390x",
"product": {
"name": "libarchive13-3.3.2-3.8.4.s390x",
"product_id": "libarchive13-3.3.2-3.8.4.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "bsdtar-3.3.2-3.8.4.x86_64",
"product": {
"name": "bsdtar-3.3.2-3.8.4.x86_64",
"product_id": "bsdtar-3.3.2-3.8.4.x86_64"
}
},
{
"category": "product_version",
"name": "libarchive-devel-3.3.2-3.8.4.x86_64",
"product": {
"name": "libarchive-devel-3.3.2-3.8.4.x86_64",
"product_id": "libarchive-devel-3.3.2-3.8.4.x86_64"
}
},
{
"category": "product_version",
"name": "libarchive13-3.3.2-3.8.4.x86_64",
"product": {
"name": "libarchive13-3.3.2-3.8.4.x86_64",
"product_id": "libarchive13-3.3.2-3.8.4.x86_64"
}
},
{
"category": "product_version",
"name": "libarchive13-32bit-3.3.2-3.8.4.x86_64",
"product": {
"name": "libarchive13-32bit-3.3.2-3.8.4.x86_64",
"product_id": "libarchive13-32bit-3.3.2-3.8.4.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Basesystem 15",
"product": {
"name": "SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-basesystem:15"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Development Tools 15",
"product": {
"name": "SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-development-tools:15"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.3.2-3.8.4.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.aarch64"
},
"product_reference": "libarchive-devel-3.3.2-3.8.4.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.3.2-3.8.4.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.ppc64le"
},
"product_reference": "libarchive-devel-3.3.2-3.8.4.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.3.2-3.8.4.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.s390x"
},
"product_reference": "libarchive-devel-3.3.2-3.8.4.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.3.2-3.8.4.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.x86_64"
},
"product_reference": "libarchive-devel-3.3.2-3.8.4.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.3.2-3.8.4.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.aarch64"
},
"product_reference": "libarchive13-3.3.2-3.8.4.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.3.2-3.8.4.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.ppc64le"
},
"product_reference": "libarchive13-3.3.2-3.8.4.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.3.2-3.8.4.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.s390x"
},
"product_reference": "libarchive13-3.3.2-3.8.4.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.3.2-3.8.4.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.x86_64"
},
"product_reference": "libarchive13-3.3.2-3.8.4.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdtar-3.3.2-3.8.4.aarch64 as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.aarch64"
},
"product_reference": "bsdtar-3.3.2-3.8.4.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdtar-3.3.2-3.8.4.ppc64le as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.ppc64le"
},
"product_reference": "bsdtar-3.3.2-3.8.4.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdtar-3.3.2-3.8.4.s390x as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.s390x"
},
"product_reference": "bsdtar-3.3.2-3.8.4.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdtar-3.3.2-3.8.4.x86_64 as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.x86_64"
},
"product_reference": "bsdtar-3.3.2-3.8.4.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-1000877",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1000877"
}
],
"notes": [
{
"category": "general",
"text": "libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-415: Double Free vulnerability in RAR decoder - libarchive/archive_read_support_format_rar.c, parse_codes(), realloc(rar-\u003elzss.window, new_size) with new_size = 0 that can result in Crash/DoS. This attack appear to be exploitable via the victim must open a specially crafted RAR archive.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1000877",
"url": "https://www.suse.com/security/cve/CVE-2018-1000877"
},
{
"category": "external",
"summary": "SUSE Bug 1120653 for CVE-2018-1000877",
"url": "https://bugzilla.suse.com/1120653"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-04-01T11:58:49Z",
"details": "low"
}
],
"title": "CVE-2018-1000877"
},
{
"cve": "CVE-2018-1000878",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1000878"
}
],
"notes": [
{
"category": "general",
"text": "libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-416: Use After Free vulnerability in RAR decoder - libarchive/archive_read_support_format_rar.c that can result in Crash/DoS - it is unknown if RCE is possible. This attack appear to be exploitable via the victim must open a specially crafted RAR archive.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1000878",
"url": "https://www.suse.com/security/cve/CVE-2018-1000878"
},
{
"category": "external",
"summary": "SUSE Bug 1120654 for CVE-2018-1000878",
"url": "https://bugzilla.suse.com/1120654"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-04-01T11:58:49Z",
"details": "moderate"
}
],
"title": "CVE-2018-1000878"
},
{
"cve": "CVE-2018-1000879",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1000879"
}
],
"notes": [
{
"category": "general",
"text": "libarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5547205 onwards (release v3.3.0 onwards) contains a CWE-476: NULL Pointer Dereference vulnerability in ACL parser - libarchive/archive_acl.c, archive_acl_from_text_l() that can result in Crash/DoS. This attack appear to be exploitable via the victim must open a specially crafted archive file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1000879",
"url": "https://www.suse.com/security/cve/CVE-2018-1000879"
},
{
"category": "external",
"summary": "SUSE Bug 1120656 for CVE-2018-1000879",
"url": "https://bugzilla.suse.com/1120656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-04-01T11:58:49Z",
"details": "low"
}
],
"title": "CVE-2018-1000879"
},
{
"cve": "CVE-2018-1000880",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1000880"
}
],
"notes": [
{
"category": "general",
"text": "libarchive version commit 9693801580c0cf7c70e862d305270a16b52826a7 onwards (release v3.2.0 onwards) contains a CWE-20: Improper Input Validation vulnerability in WARC parser - libarchive/archive_read_support_format_warc.c, _warc_read() that can result in DoS - quasi-infinite run time and disk usage from tiny file. This attack appear to be exploitable via the victim must open a specially crafted WARC file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1000880",
"url": "https://www.suse.com/security/cve/CVE-2018-1000880"
},
{
"category": "external",
"summary": "SUSE Bug 1120659 for CVE-2018-1000880",
"url": "https://bugzilla.suse.com/1120659"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-04-01T11:58:49Z",
"details": "low"
}
],
"title": "CVE-2018-1000880"
},
{
"cve": "CVE-2019-1000019",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-1000019"
}
],
"notes": [
{
"category": "general",
"text": "libarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9a757c1 onwards (release v3.0.2 onwards) contains a CWE-125: Out-of-bounds Read vulnerability in 7zip decompression, archive_read_support_format_7zip.c, header_bytes() that can result in a crash (denial of service). This attack appears to be exploitable via the victim opening a specially crafted 7zip file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-1000019",
"url": "https://www.suse.com/security/cve/CVE-2019-1000019"
},
{
"category": "external",
"summary": "SUSE Bug 1124341 for CVE-2019-1000019",
"url": "https://bugzilla.suse.com/1124341"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-04-01T11:58:49Z",
"details": "low"
}
],
"title": "CVE-2019-1000019"
},
{
"cve": "CVE-2019-1000020",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-1000020"
}
],
"notes": [
{
"category": "general",
"text": "libarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb139961 onwards (version v2.8.0 onwards) contains a CWE-835: Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027) vulnerability in ISO9660 parser, archive_read_support_format_iso9660.c, read_CE()/parse_rockridge() that can result in DoS by infinite loop. This attack appears to be exploitable via the victim opening a specially crafted ISO9660 file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-1000020",
"url": "https://www.suse.com/security/cve/CVE-2019-1000020"
},
{
"category": "external",
"summary": "SUSE Bug 1124342 for CVE-2019-1000020",
"url": "https://bugzilla.suse.com/1124342"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.8.4.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.8.4.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.8.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-04-01T11:58:49Z",
"details": "low"
}
],
"title": "CVE-2019-1000020"
}
]
}
SUSE-SU-2019:3092-1
Vulnerability from csaf_suse - Published: 2019-11-28 14:44 - Updated: 2019-11-28 14:44| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64 | — |
Vendor Fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for libarchive",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for libarchive fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-1000877: Fixed a double free vulnerability in RAR decoder (bsc#1120653).\n- CVE-2018-1000878: Fixed a Use-After-Free vulnerability in RAR decoder (bsc#1120654).\n- CVE-2019-1000019: Fixed an Out-Of-Bounds Read vulnerability in 7zip decompression (bsc#1124341).\n- CVE-2019-1000020: Fixed an Infinite Loop vulnerability in ISO9660 parser (bsc#1124342).\n- CVE-2019-18408: Fixed a use-after-free in RAR format support (bsc#1155079).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2019-3092,SUSE-SLE-DESKTOP-12-SP4-2019-3092,SUSE-SLE-SDK-12-SP4-2019-3092,SUSE-SLE-SDK-12-SP5-2019-3092,SUSE-SLE-SERVER-12-SP4-2019-3092,SUSE-SLE-SERVER-12-SP5-2019-3092",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_3092-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2019:3092-1",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20193092-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2019:3092-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2019-November/006201.html"
},
{
"category": "self",
"summary": "SUSE Bug 1032089",
"url": "https://bugzilla.suse.com/1032089"
},
{
"category": "self",
"summary": "SUSE Bug 1037008",
"url": "https://bugzilla.suse.com/1037008"
},
{
"category": "self",
"summary": "SUSE Bug 1037009",
"url": "https://bugzilla.suse.com/1037009"
},
{
"category": "self",
"summary": "SUSE Bug 1059134",
"url": "https://bugzilla.suse.com/1059134"
},
{
"category": "self",
"summary": "SUSE Bug 1059139",
"url": "https://bugzilla.suse.com/1059139"
},
{
"category": "self",
"summary": "SUSE Bug 1120653",
"url": "https://bugzilla.suse.com/1120653"
},
{
"category": "self",
"summary": "SUSE Bug 1120654",
"url": "https://bugzilla.suse.com/1120654"
},
{
"category": "self",
"summary": "SUSE Bug 1124341",
"url": "https://bugzilla.suse.com/1124341"
},
{
"category": "self",
"summary": "SUSE Bug 1124342",
"url": "https://bugzilla.suse.com/1124342"
},
{
"category": "self",
"summary": "SUSE Bug 1155079",
"url": "https://bugzilla.suse.com/1155079"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-10209 page",
"url": "https://www.suse.com/security/cve/CVE-2016-10209/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-10349 page",
"url": "https://www.suse.com/security/cve/CVE-2016-10349/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-10350 page",
"url": "https://www.suse.com/security/cve/CVE-2016-10350/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-14501 page",
"url": "https://www.suse.com/security/cve/CVE-2017-14501/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-14502 page",
"url": "https://www.suse.com/security/cve/CVE-2017-14502/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1000877 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1000877/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1000878 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1000878/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-1000019 page",
"url": "https://www.suse.com/security/cve/CVE-2019-1000019/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-1000020 page",
"url": "https://www.suse.com/security/cve/CVE-2019-1000020/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-18408 page",
"url": "https://www.suse.com/security/cve/CVE-2019-18408/"
}
],
"title": "Security update for libarchive",
"tracking": {
"current_release_date": "2019-11-28T14:44:46Z",
"generator": {
"date": "2019-11-28T14:44:46Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2019:3092-1",
"initial_release_date": "2019-11-28T14:44:46Z",
"revision_history": [
{
"date": "2019-11-28T14:44:46Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "bsdtar-3.1.2-26.6.1.aarch64",
"product": {
"name": "bsdtar-3.1.2-26.6.1.aarch64",
"product_id": "bsdtar-3.1.2-26.6.1.aarch64"
}
},
{
"category": "product_version",
"name": "libarchive-devel-3.1.2-26.6.1.aarch64",
"product": {
"name": "libarchive-devel-3.1.2-26.6.1.aarch64",
"product_id": "libarchive-devel-3.1.2-26.6.1.aarch64"
}
},
{
"category": "product_version",
"name": "libarchive13-3.1.2-26.6.1.aarch64",
"product": {
"name": "libarchive13-3.1.2-26.6.1.aarch64",
"product_id": "libarchive13-3.1.2-26.6.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libarchive13-64bit-3.1.2-26.6.1.aarch64_ilp32",
"product": {
"name": "libarchive13-64bit-3.1.2-26.6.1.aarch64_ilp32",
"product_id": "libarchive13-64bit-3.1.2-26.6.1.aarch64_ilp32"
}
}
],
"category": "architecture",
"name": "aarch64_ilp32"
},
{
"branches": [
{
"category": "product_version",
"name": "bsdtar-3.1.2-26.6.1.i586",
"product": {
"name": "bsdtar-3.1.2-26.6.1.i586",
"product_id": "bsdtar-3.1.2-26.6.1.i586"
}
},
{
"category": "product_version",
"name": "libarchive-devel-3.1.2-26.6.1.i586",
"product": {
"name": "libarchive-devel-3.1.2-26.6.1.i586",
"product_id": "libarchive-devel-3.1.2-26.6.1.i586"
}
},
{
"category": "product_version",
"name": "libarchive13-3.1.2-26.6.1.i586",
"product": {
"name": "libarchive13-3.1.2-26.6.1.i586",
"product_id": "libarchive13-3.1.2-26.6.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "bsdtar-3.1.2-26.6.1.ppc64le",
"product": {
"name": "bsdtar-3.1.2-26.6.1.ppc64le",
"product_id": "bsdtar-3.1.2-26.6.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libarchive-devel-3.1.2-26.6.1.ppc64le",
"product": {
"name": "libarchive-devel-3.1.2-26.6.1.ppc64le",
"product_id": "libarchive-devel-3.1.2-26.6.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libarchive13-3.1.2-26.6.1.ppc64le",
"product": {
"name": "libarchive13-3.1.2-26.6.1.ppc64le",
"product_id": "libarchive13-3.1.2-26.6.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "bsdtar-3.1.2-26.6.1.s390",
"product": {
"name": "bsdtar-3.1.2-26.6.1.s390",
"product_id": "bsdtar-3.1.2-26.6.1.s390"
}
},
{
"category": "product_version",
"name": "libarchive-devel-3.1.2-26.6.1.s390",
"product": {
"name": "libarchive-devel-3.1.2-26.6.1.s390",
"product_id": "libarchive-devel-3.1.2-26.6.1.s390"
}
},
{
"category": "product_version",
"name": "libarchive13-3.1.2-26.6.1.s390",
"product": {
"name": "libarchive13-3.1.2-26.6.1.s390",
"product_id": "libarchive13-3.1.2-26.6.1.s390"
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "bsdtar-3.1.2-26.6.1.s390x",
"product": {
"name": "bsdtar-3.1.2-26.6.1.s390x",
"product_id": "bsdtar-3.1.2-26.6.1.s390x"
}
},
{
"category": "product_version",
"name": "libarchive-devel-3.1.2-26.6.1.s390x",
"product": {
"name": "libarchive-devel-3.1.2-26.6.1.s390x",
"product_id": "libarchive-devel-3.1.2-26.6.1.s390x"
}
},
{
"category": "product_version",
"name": "libarchive13-3.1.2-26.6.1.s390x",
"product": {
"name": "libarchive13-3.1.2-26.6.1.s390x",
"product_id": "libarchive13-3.1.2-26.6.1.s390x"
}
},
{
"category": "product_version",
"name": "libarchive13-32bit-3.1.2-26.6.1.s390x",
"product": {
"name": "libarchive13-32bit-3.1.2-26.6.1.s390x",
"product_id": "libarchive13-32bit-3.1.2-26.6.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "bsdtar-3.1.2-26.6.1.x86_64",
"product": {
"name": "bsdtar-3.1.2-26.6.1.x86_64",
"product_id": "bsdtar-3.1.2-26.6.1.x86_64"
}
},
{
"category": "product_version",
"name": "libarchive-devel-3.1.2-26.6.1.x86_64",
"product": {
"name": "libarchive-devel-3.1.2-26.6.1.x86_64",
"product_id": "libarchive-devel-3.1.2-26.6.1.x86_64"
}
},
{
"category": "product_version",
"name": "libarchive13-3.1.2-26.6.1.x86_64",
"product": {
"name": "libarchive13-3.1.2-26.6.1.x86_64",
"product_id": "libarchive13-3.1.2-26.6.1.x86_64"
}
},
{
"category": "product_version",
"name": "libarchive13-32bit-3.1.2-26.6.1.x86_64",
"product": {
"name": "libarchive13-32bit-3.1.2-26.6.1.x86_64",
"product_id": "libarchive13-32bit-3.1.2-26.6.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 12 SP4",
"product": {
"name": "SUSE Linux Enterprise Desktop 12 SP4",
"product_id": "SUSE Linux Enterprise Desktop 12 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:12:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 12 SP4",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 12 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-sdk:12:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-sdk:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP4",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.1.2-26.6.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP4",
"product_id": "SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64"
},
"product_reference": "libarchive13-3.1.2-26.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.1.2-26.6.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64"
},
"product_reference": "libarchive-devel-3.1.2-26.6.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.1.2-26.6.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le"
},
"product_reference": "libarchive-devel-3.1.2-26.6.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.1.2-26.6.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x"
},
"product_reference": "libarchive-devel-3.1.2-26.6.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.1.2-26.6.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64"
},
"product_reference": "libarchive-devel-3.1.2-26.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.1.2-26.6.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64"
},
"product_reference": "libarchive-devel-3.1.2-26.6.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.1.2-26.6.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le"
},
"product_reference": "libarchive-devel-3.1.2-26.6.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.1.2-26.6.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x"
},
"product_reference": "libarchive-devel-3.1.2-26.6.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.1.2-26.6.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
},
"product_reference": "libarchive-devel-3.1.2-26.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.1.2-26.6.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64"
},
"product_reference": "libarchive13-3.1.2-26.6.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.1.2-26.6.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le"
},
"product_reference": "libarchive13-3.1.2-26.6.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.1.2-26.6.1.s390x as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x"
},
"product_reference": "libarchive13-3.1.2-26.6.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.1.2-26.6.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64"
},
"product_reference": "libarchive13-3.1.2-26.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.1.2-26.6.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64"
},
"product_reference": "libarchive13-3.1.2-26.6.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.1.2-26.6.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le"
},
"product_reference": "libarchive13-3.1.2-26.6.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.1.2-26.6.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x"
},
"product_reference": "libarchive13-3.1.2-26.6.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.1.2-26.6.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64"
},
"product_reference": "libarchive13-3.1.2-26.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.1.2-26.6.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64"
},
"product_reference": "libarchive13-3.1.2-26.6.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.1.2-26.6.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le"
},
"product_reference": "libarchive13-3.1.2-26.6.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.1.2-26.6.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x"
},
"product_reference": "libarchive13-3.1.2-26.6.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.1.2-26.6.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64"
},
"product_reference": "libarchive13-3.1.2-26.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.1.2-26.6.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64"
},
"product_reference": "libarchive13-3.1.2-26.6.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.1.2-26.6.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le"
},
"product_reference": "libarchive13-3.1.2-26.6.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.1.2-26.6.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x"
},
"product_reference": "libarchive13-3.1.2-26.6.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.1.2-26.6.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64"
},
"product_reference": "libarchive13-3.1.2-26.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-10209",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-10209"
}
],
"notes": [
{
"category": "general",
"text": "The archive_wstring_append_from_mbs function in archive_string.c in libarchive 3.2.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted archive file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-10209",
"url": "https://www.suse.com/security/cve/CVE-2016-10209"
},
{
"category": "external",
"summary": "SUSE Bug 1032089 for CVE-2016-10209",
"url": "https://bugzilla.suse.com/1032089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-28T14:44:46Z",
"details": "moderate"
}
],
"title": "CVE-2016-10209"
},
{
"cve": "CVE-2016-10349",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-10349"
}
],
"notes": [
{
"category": "general",
"text": "The archive_le32dec function in archive_endian.h in libarchive 3.2.2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-10349",
"url": "https://www.suse.com/security/cve/CVE-2016-10349"
},
{
"category": "external",
"summary": "SUSE Bug 1037008 for CVE-2016-10349",
"url": "https://bugzilla.suse.com/1037008"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-28T14:44:46Z",
"details": "moderate"
}
],
"title": "CVE-2016-10349"
},
{
"cve": "CVE-2016-10350",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-10350"
}
],
"notes": [
{
"category": "general",
"text": "The archive_read_format_cab_read_header function in archive_read_support_format_cab.c in libarchive 3.2.2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-10350",
"url": "https://www.suse.com/security/cve/CVE-2016-10350"
},
{
"category": "external",
"summary": "SUSE Bug 1037009 for CVE-2016-10350",
"url": "https://bugzilla.suse.com/1037009"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-28T14:44:46Z",
"details": "moderate"
}
],
"title": "CVE-2016-10350"
},
{
"cve": "CVE-2017-14501",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-14501"
}
],
"notes": [
{
"category": "general",
"text": "An out-of-bounds read flaw exists in parse_file_info in archive_read_support_format_iso9660.c in libarchive 3.3.2 when extracting a specially crafted iso9660 iso file, related to archive_read_format_iso9660_read_header.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-14501",
"url": "https://www.suse.com/security/cve/CVE-2017-14501"
},
{
"category": "external",
"summary": "SUSE Bug 1059139 for CVE-2017-14501",
"url": "https://bugzilla.suse.com/1059139"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-28T14:44:46Z",
"details": "low"
}
],
"title": "CVE-2017-14501"
},
{
"cve": "CVE-2017-14502",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-14502"
}
],
"notes": [
{
"category": "general",
"text": "read_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archive_read_format_rar_read_header.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-14502",
"url": "https://www.suse.com/security/cve/CVE-2017-14502"
},
{
"category": "external",
"summary": "SUSE Bug 1059134 for CVE-2017-14502",
"url": "https://bugzilla.suse.com/1059134"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-28T14:44:46Z",
"details": "low"
}
],
"title": "CVE-2017-14502"
},
{
"cve": "CVE-2018-1000877",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1000877"
}
],
"notes": [
{
"category": "general",
"text": "libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-415: Double Free vulnerability in RAR decoder - libarchive/archive_read_support_format_rar.c, parse_codes(), realloc(rar-\u003elzss.window, new_size) with new_size = 0 that can result in Crash/DoS. This attack appear to be exploitable via the victim must open a specially crafted RAR archive.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1000877",
"url": "https://www.suse.com/security/cve/CVE-2018-1000877"
},
{
"category": "external",
"summary": "SUSE Bug 1120653 for CVE-2018-1000877",
"url": "https://bugzilla.suse.com/1120653"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-28T14:44:46Z",
"details": "low"
}
],
"title": "CVE-2018-1000877"
},
{
"cve": "CVE-2018-1000878",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1000878"
}
],
"notes": [
{
"category": "general",
"text": "libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-416: Use After Free vulnerability in RAR decoder - libarchive/archive_read_support_format_rar.c that can result in Crash/DoS - it is unknown if RCE is possible. This attack appear to be exploitable via the victim must open a specially crafted RAR archive.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1000878",
"url": "https://www.suse.com/security/cve/CVE-2018-1000878"
},
{
"category": "external",
"summary": "SUSE Bug 1120654 for CVE-2018-1000878",
"url": "https://bugzilla.suse.com/1120654"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-28T14:44:46Z",
"details": "moderate"
}
],
"title": "CVE-2018-1000878"
},
{
"cve": "CVE-2019-1000019",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-1000019"
}
],
"notes": [
{
"category": "general",
"text": "libarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9a757c1 onwards (release v3.0.2 onwards) contains a CWE-125: Out-of-bounds Read vulnerability in 7zip decompression, archive_read_support_format_7zip.c, header_bytes() that can result in a crash (denial of service). This attack appears to be exploitable via the victim opening a specially crafted 7zip file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-1000019",
"url": "https://www.suse.com/security/cve/CVE-2019-1000019"
},
{
"category": "external",
"summary": "SUSE Bug 1124341 for CVE-2019-1000019",
"url": "https://bugzilla.suse.com/1124341"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-28T14:44:46Z",
"details": "low"
}
],
"title": "CVE-2019-1000019"
},
{
"cve": "CVE-2019-1000020",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-1000020"
}
],
"notes": [
{
"category": "general",
"text": "libarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb139961 onwards (version v2.8.0 onwards) contains a CWE-835: Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027) vulnerability in ISO9660 parser, archive_read_support_format_iso9660.c, read_CE()/parse_rockridge() that can result in DoS by infinite loop. This attack appears to be exploitable via the victim opening a specially crafted ISO9660 file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-1000020",
"url": "https://www.suse.com/security/cve/CVE-2019-1000020"
},
{
"category": "external",
"summary": "SUSE Bug 1124342 for CVE-2019-1000020",
"url": "https://bugzilla.suse.com/1124342"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-28T14:44:46Z",
"details": "low"
}
],
"title": "CVE-2019-1000020"
},
{
"cve": "CVE-2019-18408",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-18408"
}
],
"notes": [
{
"category": "general",
"text": "archive_read_format_rar_read_data in archive_read_support_format_rar.c in libarchive before 3.4.0 has a use-after-free in a certain ARCHIVE_FAILED situation, related to Ppmd7_DecodeSymbol.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-18408",
"url": "https://www.suse.com/security/cve/CVE-2019-18408"
},
{
"category": "external",
"summary": "SUSE Bug 1155079 for CVE-2019-18408",
"url": "https://bugzilla.suse.com/1155079"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-28T14:44:46Z",
"details": "moderate"
}
],
"title": "CVE-2019-18408"
}
]
}
SUSE-SU-2019:3093-1
Vulnerability from csaf_suse - Published: 2019-11-28 14:45 - Updated: 2019-11-28 14:45| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.x86_64 | — |
Vendor Fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for libarchive",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for libarchive fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-1000877: Fixed a double free vulnerability in RAR decoder (bsc#1120653).\n- CVE-2018-1000878: Fixed a Use-After-Free vulnerability in RAR decoder (bsc#1120654).\n- CVE-2019-1000019: Fixed an Out-Of-Bounds Read vulnerability in 7zip decompression (bsc#1124341).\n- CVE-2019-1000020: Fixed an Infinite Loop vulnerability in ISO9660 parser (bsc#1124342).\n- CVE-2019-18408: Fixed a use-after-free in RAR format support (bsc#1155079).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2019-3093,SUSE-SLE-Module-Basesystem-15-2019-3093,SUSE-SLE-Module-Basesystem-15-SP1-2019-3093,SUSE-SLE-Module-Development-Tools-15-2019-3093,SUSE-SLE-Module-Development-Tools-15-SP1-2019-3093,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-3093",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_3093-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2019:3093-1",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20193093-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2019:3093-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2019-November/006196.html"
},
{
"category": "self",
"summary": "SUSE Bug 1120653",
"url": "https://bugzilla.suse.com/1120653"
},
{
"category": "self",
"summary": "SUSE Bug 1120654",
"url": "https://bugzilla.suse.com/1120654"
},
{
"category": "self",
"summary": "SUSE Bug 1124341",
"url": "https://bugzilla.suse.com/1124341"
},
{
"category": "self",
"summary": "SUSE Bug 1124342",
"url": "https://bugzilla.suse.com/1124342"
},
{
"category": "self",
"summary": "SUSE Bug 1155079",
"url": "https://bugzilla.suse.com/1155079"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1000877 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1000877/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1000878 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1000878/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-1000019 page",
"url": "https://www.suse.com/security/cve/CVE-2019-1000019/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-1000020 page",
"url": "https://www.suse.com/security/cve/CVE-2019-1000020/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-18408 page",
"url": "https://www.suse.com/security/cve/CVE-2019-18408/"
}
],
"title": "Security update for libarchive",
"tracking": {
"current_release_date": "2019-11-28T14:45:18Z",
"generator": {
"date": "2019-11-28T14:45:18Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2019:3093-1",
"initial_release_date": "2019-11-28T14:45:18Z",
"revision_history": [
{
"date": "2019-11-28T14:45:18Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "bsdtar-3.3.2-3.11.1.aarch64",
"product": {
"name": "bsdtar-3.3.2-3.11.1.aarch64",
"product_id": "bsdtar-3.3.2-3.11.1.aarch64"
}
},
{
"category": "product_version",
"name": "libarchive-devel-3.3.2-3.11.1.aarch64",
"product": {
"name": "libarchive-devel-3.3.2-3.11.1.aarch64",
"product_id": "libarchive-devel-3.3.2-3.11.1.aarch64"
}
},
{
"category": "product_version",
"name": "libarchive13-3.3.2-3.11.1.aarch64",
"product": {
"name": "libarchive13-3.3.2-3.11.1.aarch64",
"product_id": "libarchive13-3.3.2-3.11.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libarchive13-64bit-3.3.2-3.11.1.aarch64_ilp32",
"product": {
"name": "libarchive13-64bit-3.3.2-3.11.1.aarch64_ilp32",
"product_id": "libarchive13-64bit-3.3.2-3.11.1.aarch64_ilp32"
}
}
],
"category": "architecture",
"name": "aarch64_ilp32"
},
{
"branches": [
{
"category": "product_version",
"name": "bsdtar-3.3.2-3.11.1.i586",
"product": {
"name": "bsdtar-3.3.2-3.11.1.i586",
"product_id": "bsdtar-3.3.2-3.11.1.i586"
}
},
{
"category": "product_version",
"name": "libarchive-devel-3.3.2-3.11.1.i586",
"product": {
"name": "libarchive-devel-3.3.2-3.11.1.i586",
"product_id": "libarchive-devel-3.3.2-3.11.1.i586"
}
},
{
"category": "product_version",
"name": "libarchive13-3.3.2-3.11.1.i586",
"product": {
"name": "libarchive13-3.3.2-3.11.1.i586",
"product_id": "libarchive13-3.3.2-3.11.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "bsdtar-3.3.2-3.11.1.ppc64le",
"product": {
"name": "bsdtar-3.3.2-3.11.1.ppc64le",
"product_id": "bsdtar-3.3.2-3.11.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libarchive-devel-3.3.2-3.11.1.ppc64le",
"product": {
"name": "libarchive-devel-3.3.2-3.11.1.ppc64le",
"product_id": "libarchive-devel-3.3.2-3.11.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libarchive13-3.3.2-3.11.1.ppc64le",
"product": {
"name": "libarchive13-3.3.2-3.11.1.ppc64le",
"product_id": "libarchive13-3.3.2-3.11.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "bsdtar-3.3.2-3.11.1.s390x",
"product": {
"name": "bsdtar-3.3.2-3.11.1.s390x",
"product_id": "bsdtar-3.3.2-3.11.1.s390x"
}
},
{
"category": "product_version",
"name": "libarchive-devel-3.3.2-3.11.1.s390x",
"product": {
"name": "libarchive-devel-3.3.2-3.11.1.s390x",
"product_id": "libarchive-devel-3.3.2-3.11.1.s390x"
}
},
{
"category": "product_version",
"name": "libarchive13-3.3.2-3.11.1.s390x",
"product": {
"name": "libarchive13-3.3.2-3.11.1.s390x",
"product_id": "libarchive13-3.3.2-3.11.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "bsdtar-3.3.2-3.11.1.x86_64",
"product": {
"name": "bsdtar-3.3.2-3.11.1.x86_64",
"product_id": "bsdtar-3.3.2-3.11.1.x86_64"
}
},
{
"category": "product_version",
"name": "libarchive-devel-3.3.2-3.11.1.x86_64",
"product": {
"name": "libarchive-devel-3.3.2-3.11.1.x86_64",
"product_id": "libarchive-devel-3.3.2-3.11.1.x86_64"
}
},
{
"category": "product_version",
"name": "libarchive13-3.3.2-3.11.1.x86_64",
"product": {
"name": "libarchive13-3.3.2-3.11.1.x86_64",
"product_id": "libarchive13-3.3.2-3.11.1.x86_64"
}
},
{
"category": "product_version",
"name": "libarchive13-32bit-3.3.2-3.11.1.x86_64",
"product": {
"name": "libarchive13-32bit-3.3.2-3.11.1.x86_64",
"product_id": "libarchive13-32bit-3.3.2-3.11.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Basesystem 15",
"product": {
"name": "SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-basesystem:15"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product": {
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-basesystem:15:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Development Tools 15",
"product": {
"name": "SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-development-tools:15"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Development Tools 15 SP1",
"product": {
"name": "SUSE Linux Enterprise Module for Development Tools 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-development-tools:15:sp1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.3.2-3.11.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.aarch64"
},
"product_reference": "libarchive-devel-3.3.2-3.11.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.3.2-3.11.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.ppc64le"
},
"product_reference": "libarchive-devel-3.3.2-3.11.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.3.2-3.11.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.s390x"
},
"product_reference": "libarchive-devel-3.3.2-3.11.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.3.2-3.11.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.x86_64"
},
"product_reference": "libarchive-devel-3.3.2-3.11.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.3.2-3.11.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.aarch64"
},
"product_reference": "libarchive13-3.3.2-3.11.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.3.2-3.11.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.ppc64le"
},
"product_reference": "libarchive13-3.3.2-3.11.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.3.2-3.11.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.s390x"
},
"product_reference": "libarchive13-3.3.2-3.11.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.3.2-3.11.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.x86_64"
},
"product_reference": "libarchive13-3.3.2-3.11.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.3.2-3.11.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.aarch64"
},
"product_reference": "libarchive-devel-3.3.2-3.11.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.3.2-3.11.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.ppc64le"
},
"product_reference": "libarchive-devel-3.3.2-3.11.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.3.2-3.11.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.s390x"
},
"product_reference": "libarchive-devel-3.3.2-3.11.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.3.2-3.11.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.x86_64"
},
"product_reference": "libarchive-devel-3.3.2-3.11.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.3.2-3.11.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.aarch64"
},
"product_reference": "libarchive13-3.3.2-3.11.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.3.2-3.11.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.ppc64le"
},
"product_reference": "libarchive13-3.3.2-3.11.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.3.2-3.11.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.s390x"
},
"product_reference": "libarchive13-3.3.2-3.11.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.3.2-3.11.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.x86_64"
},
"product_reference": "libarchive13-3.3.2-3.11.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdtar-3.3.2-3.11.1.aarch64 as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.aarch64"
},
"product_reference": "bsdtar-3.3.2-3.11.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdtar-3.3.2-3.11.1.ppc64le as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.ppc64le"
},
"product_reference": "bsdtar-3.3.2-3.11.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdtar-3.3.2-3.11.1.s390x as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.s390x"
},
"product_reference": "bsdtar-3.3.2-3.11.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdtar-3.3.2-3.11.1.x86_64 as component of SUSE Linux Enterprise Module for Development Tools 15",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.x86_64"
},
"product_reference": "bsdtar-3.3.2-3.11.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdtar-3.3.2-3.11.1.aarch64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.aarch64"
},
"product_reference": "bsdtar-3.3.2-3.11.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdtar-3.3.2-3.11.1.ppc64le as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.ppc64le"
},
"product_reference": "bsdtar-3.3.2-3.11.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdtar-3.3.2-3.11.1.s390x as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.s390x"
},
"product_reference": "bsdtar-3.3.2-3.11.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bsdtar-3.3.2-3.11.1.x86_64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.x86_64"
},
"product_reference": "bsdtar-3.3.2-3.11.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-1000877",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1000877"
}
],
"notes": [
{
"category": "general",
"text": "libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-415: Double Free vulnerability in RAR decoder - libarchive/archive_read_support_format_rar.c, parse_codes(), realloc(rar-\u003elzss.window, new_size) with new_size = 0 that can result in Crash/DoS. This attack appear to be exploitable via the victim must open a specially crafted RAR archive.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1000877",
"url": "https://www.suse.com/security/cve/CVE-2018-1000877"
},
{
"category": "external",
"summary": "SUSE Bug 1120653 for CVE-2018-1000877",
"url": "https://bugzilla.suse.com/1120653"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-28T14:45:18Z",
"details": "low"
}
],
"title": "CVE-2018-1000877"
},
{
"cve": "CVE-2018-1000878",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1000878"
}
],
"notes": [
{
"category": "general",
"text": "libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-416: Use After Free vulnerability in RAR decoder - libarchive/archive_read_support_format_rar.c that can result in Crash/DoS - it is unknown if RCE is possible. This attack appear to be exploitable via the victim must open a specially crafted RAR archive.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1000878",
"url": "https://www.suse.com/security/cve/CVE-2018-1000878"
},
{
"category": "external",
"summary": "SUSE Bug 1120654 for CVE-2018-1000878",
"url": "https://bugzilla.suse.com/1120654"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-28T14:45:18Z",
"details": "moderate"
}
],
"title": "CVE-2018-1000878"
},
{
"cve": "CVE-2019-1000019",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-1000019"
}
],
"notes": [
{
"category": "general",
"text": "libarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9a757c1 onwards (release v3.0.2 onwards) contains a CWE-125: Out-of-bounds Read vulnerability in 7zip decompression, archive_read_support_format_7zip.c, header_bytes() that can result in a crash (denial of service). This attack appears to be exploitable via the victim opening a specially crafted 7zip file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-1000019",
"url": "https://www.suse.com/security/cve/CVE-2019-1000019"
},
{
"category": "external",
"summary": "SUSE Bug 1124341 for CVE-2019-1000019",
"url": "https://bugzilla.suse.com/1124341"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-28T14:45:18Z",
"details": "low"
}
],
"title": "CVE-2019-1000019"
},
{
"cve": "CVE-2019-1000020",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-1000020"
}
],
"notes": [
{
"category": "general",
"text": "libarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb139961 onwards (version v2.8.0 onwards) contains a CWE-835: Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027) vulnerability in ISO9660 parser, archive_read_support_format_iso9660.c, read_CE()/parse_rockridge() that can result in DoS by infinite loop. This attack appears to be exploitable via the victim opening a specially crafted ISO9660 file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-1000020",
"url": "https://www.suse.com/security/cve/CVE-2019-1000020"
},
{
"category": "external",
"summary": "SUSE Bug 1124342 for CVE-2019-1000020",
"url": "https://bugzilla.suse.com/1124342"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-28T14:45:18Z",
"details": "low"
}
],
"title": "CVE-2019-1000020"
},
{
"cve": "CVE-2019-18408",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-18408"
}
],
"notes": [
{
"category": "general",
"text": "archive_read_format_rar_read_data in archive_read_support_format_rar.c in libarchive before 3.4.0 has a use-after-free in a certain ARCHIVE_FAILED situation, related to Ppmd7_DecodeSymbol.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-18408",
"url": "https://www.suse.com/security/cve/CVE-2019-18408"
},
{
"category": "external",
"summary": "SUSE Bug 1155079 for CVE-2019-18408",
"url": "https://bugzilla.suse.com/1155079"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive-devel-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP1:libarchive13-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive-devel-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15:libarchive13-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP1:bsdtar-3.3.2-3.11.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15:bsdtar-3.3.2-3.11.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-28T14:45:18Z",
"details": "moderate"
}
],
"title": "CVE-2019-18408"
}
]
}
WID-SEC-W-2024-3274
Vulnerability from csaf_certbund - Published: 2019-02-04 23:00 - Updated: 2024-10-27 23:00Es besteht eine Schwachstelle in libarchive durch einen Fehler in der Funktion "get_uncompressed_data()". Ein nachfolgender Aufruf der Funktion "crc32()" innerhalb von "header_bytes" führt zu einem Leseversuch mit ungültigem Speicher und damit zu einem Programmabsturz. Ein Angreifer kann dies ausnutzen, um einen Denial of Service Zustand herbeizuführen. Zur erfolgreichen Ausnutzung dieser Schwachstelle muss der Angreifer den Benutzer dazu bringen, eine modifizierte Archivdatei zu öffnen.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Open Source Arch Linux
Open Source
|
cpe:/o:archlinux:archlinux:-
|
— | |
|
F5 BIG-IP
F5
|
cpe:/a:f5:big-ip:-
|
— | |
|
Open Source libarchive
Open Source
|
cpe:/a:libarchive:libarchive:-
|
— |
Es besteht eine Schwachstelle in libarchive durch eine Endlosschleife. Dies wird durch die Funktionen "read_CE()" und "parse_rockridge()" verursacht, wenn eine ISO-Datei keine "Rockridge extension" enthält. Ein Angreifer kann dies ausnutzen, um einen Denial of Service Zustand herbeizuführen. Zur erfolgreichen Ausnutzung dieser Schwachstelle muss der Angreifer den Benutzer dazu bringen, eine modifizierte ISO Datei zu öffnen.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Open Source Arch Linux
Open Source
|
cpe:/o:archlinux:archlinux:-
|
— | |
|
F5 BIG-IP
F5
|
cpe:/a:f5:big-ip:-
|
— | |
|
Open Source libarchive
Open Source
|
cpe:/a:libarchive:libarchive:-
|
— |
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "libarchive ist eine C Bibliothek und ein Komandozeilen-Tool zum Lesen und Bearbeiten von tar, cpio, zip, ISO und anderen Formaten.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in libarchive ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Linux",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2024-3274 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2019/wid-sec-w-2024-3274.json"
},
{
"category": "self",
"summary": "WID-SEC-2024-3274 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3274"
},
{
"category": "external",
"summary": "Meldung im Git libarchive vom 2019-01-23",
"url": "https://github.com/libarchive/libarchive/pull/1120"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-3884-1 vom 2019-02-07",
"url": "https://usn.ubuntu.com/3884-1/"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2019:0831-1 vom 2019-04-01",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20190831-1.html"
},
{
"category": "external",
"summary": "Arch Linux Security Advisory ASA-201906-21 vom 2019-06-25",
"url": "https://security.archlinux.org/ASA-201906-21"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2019:2298 vom 2019-08-06",
"url": "https://access.redhat.com/errata/RHSA-2019:2298"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2019:3698 vom 2019-11-05",
"url": "https://access.redhat.com/errata/RHSA-2019:3698"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2019:3093-1 vom 2019-11-29",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20193093-1.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2019:3092-1 vom 2019-11-29",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20193092-1.html"
},
{
"category": "external",
"summary": "F5 Security Advisory K000148255 vom 2024-10-25",
"url": "https://my.f5.com/manage/s/article/K000148255"
}
],
"source_lang": "en-US",
"title": "libarchive: Mehrere Schwachstellen erm\u00f6glichen Denial of Service",
"tracking": {
"current_release_date": "2024-10-27T23:00:00.000+00:00",
"generator": {
"date": "2024-10-28T09:09:35.049+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.8"
}
},
"id": "WID-SEC-W-2024-3274",
"initial_release_date": "2019-02-04T23:00:00.000+00:00",
"revision_history": [
{
"date": "2019-02-04T23:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2019-02-07T23:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2019-03-21T23:00:00.000+00:00",
"number": "3",
"summary": "Referenz(en) aufgenommen: FEDORA-2019-FBE83D0E32, FEDORA-2019-9EED40F88B"
},
{
"date": "2019-04-01T22:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2019-06-25T22:00:00.000+00:00",
"number": "5",
"summary": "Neue Updates von Arch Linux aufgenommen"
},
{
"date": "2019-08-06T22:00:00.000+00:00",
"number": "6",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2019-11-05T23:00:00.000+00:00",
"number": "7",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2019-11-28T23:00:00.000+00:00",
"number": "8",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2024-10-27T23:00:00.000+00:00",
"number": "9",
"summary": "Neue Updates von F5 aufgenommen"
}
],
"status": "final",
"version": "9"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "F5 BIG-IP",
"product": {
"name": "F5 BIG-IP",
"product_id": "T001663",
"product_identification_helper": {
"cpe": "cpe:/a:f5:big-ip:-"
}
}
}
],
"category": "vendor",
"name": "F5"
},
{
"branches": [
{
"category": "product_name",
"name": "Open Source Arch Linux",
"product": {
"name": "Open Source Arch Linux",
"product_id": "T013312",
"product_identification_helper": {
"cpe": "cpe:/o:archlinux:archlinux:-"
}
}
},
{
"category": "product_name",
"name": "Open Source libarchive",
"product": {
"name": "Open Source libarchive",
"product_id": "T004933",
"product_identification_helper": {
"cpe": "cpe:/a:libarchive:libarchive:-"
}
}
}
],
"category": "vendor",
"name": "Open Source"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T002207",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
},
{
"branches": [
{
"category": "product_name",
"name": "Ubuntu Linux",
"product": {
"name": "Ubuntu Linux",
"product_id": "T000126",
"product_identification_helper": {
"cpe": "cpe:/o:canonical:ubuntu_linux:-"
}
}
}
],
"category": "vendor",
"name": "Ubuntu"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-1000019",
"notes": [
{
"category": "description",
"text": "Es besteht eine Schwachstelle in libarchive durch einen Fehler in der Funktion \"get_uncompressed_data()\". Ein nachfolgender Aufruf der Funktion \"crc32()\" innerhalb von \"header_bytes\" f\u00fchrt zu einem Leseversuch mit ung\u00fcltigem Speicher und damit zu einem Programmabsturz. Ein Angreifer kann dies ausnutzen, um einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung dieser Schwachstelle muss der Angreifer den Benutzer dazu bringen, eine modifizierte Archivdatei zu \u00f6ffnen."
}
],
"product_status": {
"known_affected": [
"T002207",
"67646",
"T000126",
"T013312",
"T001663",
"T004933"
]
},
"release_date": "2019-02-04T23:00:00.000+00:00",
"title": "CVE-2019-1000019"
},
{
"cve": "CVE-2019-1000020",
"notes": [
{
"category": "description",
"text": "Es besteht eine Schwachstelle in libarchive durch eine Endlosschleife. Dies wird durch die Funktionen \"read_CE()\" und \"parse_rockridge()\" verursacht, wenn eine ISO-Datei keine \"Rockridge extension\" enth\u00e4lt. Ein Angreifer kann dies ausnutzen, um einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung dieser Schwachstelle muss der Angreifer den Benutzer dazu bringen, eine modifizierte ISO Datei zu \u00f6ffnen."
}
],
"product_status": {
"known_affected": [
"T002207",
"67646",
"T000126",
"T013312",
"T001663",
"T004933"
]
},
"release_date": "2019-02-04T23:00:00.000+00:00",
"title": "CVE-2019-1000020"
}
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.