A libarchive security update has been released for Oracle Linux 8.
Oracle Linux Security Advisory ELSA-2020-0271
http://linux.oracle.com/errata/ELSA-2020-0271.html
The following updated rpms for Oracle Linux 8 have been uploaded to the
Unbreakable Linux Network:
x86_64:
bsdtar-3.3.2-8.el8_1.x86_64.rpm
libarchive-3.3.2-8.el8_1.i686.rpm
libarchive-3.3.2-8.el8_1.x86_64.rpm
libarchive-devel-3.3.2-8.el8_1.i686.rpm
libarchive-devel-3.3.2-8.el8_1.x86_64.rpm
aarch64:
bsdtar-3.3.2-8.el8_1.aarch64.rpm
libarchive-3.3.2-8.el8_1.aarch64.rpm
libarchive-devel-3.3.2-8.el8_1.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/libarchive-3.3.2-8.el8_1.src.rpm
Description of changes:
[3.3.2-8]
- Fix CVE-2019-18408: RAR use-after-free