Fedora alert FEDORA-2016-c580100c89 (libarchive)
| From: | updates@fedoraproject.org | |
| To: | package-announce@lists.fedoraproject.org | |
| Subject: | [SECURITY] Fedora 24 Update: libarchive-3.2.1-3.fc24 | |
| Date: | Wed, 27 Jul 2016 18:59:35 +0000 (UTC) | |
| Message-ID: | <20160727185935.B80866087584@bastion01.phx2.fedoraproject.org> |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2016-c580100c89 2016-07-27 15:59:17.384943 -------------------------------------------------------------------------------- Name : libarchive Product : Fedora 24 Version : 3.2.1 Release : 3.fc24 URL : http://www.libarchive.org/ Summary : A library for handling streaming archive formats Description : Libarchive is a programming library that can create and read several different streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives. -------------------------------------------------------------------------------- Update Information: rebase on to version 3.2.1 fixing several flaws -------------------------------------------------------------------------------- References: [ 1 ] Bug #1352776 - libarchive: various flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1352776 [ 2 ] Bug #1358367 - CVE-2016-6250 libarchive: Integer overflow when verifying filename size [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1358367 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update libarchive' at the command line. For more information, refer to "Managing Software with yum", available at https://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://lists.fedoraproject.org/admin/lists/package-annou...