Debian 10 Buster DLA-3202-1 Moderate: Libarchive Security Issues
debian lts
November 22, 2022
Three issues have been found in libarchive, a multi-format archive and compression library
Topics Covered
Summary
CVE-2019-19221
out-of-bounds read because of an incorrect mbrtowc or mbtowc call
CVE-2021-23177
extracting a symlink with ACLs modifies ACLs of target
CVE-2021-31566
symbolic links incorrectly followed when changing modes, times,
ACL and flags of a file while extracting an archive
For Debian 10 buster, these problems have been fixed in version
3.3.3-4+deb10u2.
We recommend that you upgrade your libarchive packages.
For the detailed security status of libarchive please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/libarchive
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Package: libarchive
Version: 3.3.3-4+deb10u2
CVE ID: CVE-2019-19221 CVE-2021-23177 CVE-2021-31566
Debian Bug: 945287 1001986 1001990
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!