suse-su-2019:3092-1
Vulnerability from csaf_suse
Published
2019-11-28 14:44
Modified
2019-11-28 14:44
Summary
Security update for libarchive
Notes
Title of the patch
Security update for libarchive
Description of the patch
This update for libarchive fixes the following issues:
Security issues fixed:
- CVE-2018-1000877: Fixed a double free vulnerability in RAR decoder (bsc#1120653).
- CVE-2018-1000878: Fixed a Use-After-Free vulnerability in RAR decoder (bsc#1120654).
- CVE-2019-1000019: Fixed an Out-Of-Bounds Read vulnerability in 7zip decompression (bsc#1124341).
- CVE-2019-1000020: Fixed an Infinite Loop vulnerability in ISO9660 parser (bsc#1124342).
- CVE-2019-18408: Fixed a use-after-free in RAR format support (bsc#1155079).
Patchnames
SUSE-2019-3092,SUSE-SLE-DESKTOP-12-SP4-2019-3092,SUSE-SLE-SDK-12-SP4-2019-3092,SUSE-SLE-SDK-12-SP5-2019-3092,SUSE-SLE-SERVER-12-SP4-2019-3092,SUSE-SLE-SERVER-12-SP5-2019-3092
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for libarchive",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for libarchive fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-1000877: Fixed a double free vulnerability in RAR decoder (bsc#1120653).\n- CVE-2018-1000878: Fixed a Use-After-Free vulnerability in RAR decoder (bsc#1120654).\n- CVE-2019-1000019: Fixed an Out-Of-Bounds Read vulnerability in 7zip decompression (bsc#1124341).\n- CVE-2019-1000020: Fixed an Infinite Loop vulnerability in ISO9660 parser (bsc#1124342).\n- CVE-2019-18408: Fixed a use-after-free in RAR format support (bsc#1155079).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2019-3092,SUSE-SLE-DESKTOP-12-SP4-2019-3092,SUSE-SLE-SDK-12-SP4-2019-3092,SUSE-SLE-SDK-12-SP5-2019-3092,SUSE-SLE-SERVER-12-SP4-2019-3092,SUSE-SLE-SERVER-12-SP5-2019-3092",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_3092-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2019:3092-1",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20193092-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2019:3092-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2019-November/006201.html"
},
{
"category": "self",
"summary": "SUSE Bug 1032089",
"url": "https://bugzilla.suse.com/1032089"
},
{
"category": "self",
"summary": "SUSE Bug 1037008",
"url": "https://bugzilla.suse.com/1037008"
},
{
"category": "self",
"summary": "SUSE Bug 1037009",
"url": "https://bugzilla.suse.com/1037009"
},
{
"category": "self",
"summary": "SUSE Bug 1059134",
"url": "https://bugzilla.suse.com/1059134"
},
{
"category": "self",
"summary": "SUSE Bug 1059139",
"url": "https://bugzilla.suse.com/1059139"
},
{
"category": "self",
"summary": "SUSE Bug 1120653",
"url": "https://bugzilla.suse.com/1120653"
},
{
"category": "self",
"summary": "SUSE Bug 1120654",
"url": "https://bugzilla.suse.com/1120654"
},
{
"category": "self",
"summary": "SUSE Bug 1124341",
"url": "https://bugzilla.suse.com/1124341"
},
{
"category": "self",
"summary": "SUSE Bug 1124342",
"url": "https://bugzilla.suse.com/1124342"
},
{
"category": "self",
"summary": "SUSE Bug 1155079",
"url": "https://bugzilla.suse.com/1155079"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-10209 page",
"url": "https://www.suse.com/security/cve/CVE-2016-10209/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-10349 page",
"url": "https://www.suse.com/security/cve/CVE-2016-10349/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-10350 page",
"url": "https://www.suse.com/security/cve/CVE-2016-10350/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-14501 page",
"url": "https://www.suse.com/security/cve/CVE-2017-14501/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-14502 page",
"url": "https://www.suse.com/security/cve/CVE-2017-14502/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1000877 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1000877/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1000878 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1000878/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-1000019 page",
"url": "https://www.suse.com/security/cve/CVE-2019-1000019/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-1000020 page",
"url": "https://www.suse.com/security/cve/CVE-2019-1000020/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-18408 page",
"url": "https://www.suse.com/security/cve/CVE-2019-18408/"
}
],
"title": "Security update for libarchive",
"tracking": {
"current_release_date": "2019-11-28T14:44:46Z",
"generator": {
"date": "2019-11-28T14:44:46Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2019:3092-1",
"initial_release_date": "2019-11-28T14:44:46Z",
"revision_history": [
{
"date": "2019-11-28T14:44:46Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "bsdtar-3.1.2-26.6.1.aarch64",
"product": {
"name": "bsdtar-3.1.2-26.6.1.aarch64",
"product_id": "bsdtar-3.1.2-26.6.1.aarch64"
}
},
{
"category": "product_version",
"name": "libarchive-devel-3.1.2-26.6.1.aarch64",
"product": {
"name": "libarchive-devel-3.1.2-26.6.1.aarch64",
"product_id": "libarchive-devel-3.1.2-26.6.1.aarch64"
}
},
{
"category": "product_version",
"name": "libarchive13-3.1.2-26.6.1.aarch64",
"product": {
"name": "libarchive13-3.1.2-26.6.1.aarch64",
"product_id": "libarchive13-3.1.2-26.6.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libarchive13-64bit-3.1.2-26.6.1.aarch64_ilp32",
"product": {
"name": "libarchive13-64bit-3.1.2-26.6.1.aarch64_ilp32",
"product_id": "libarchive13-64bit-3.1.2-26.6.1.aarch64_ilp32"
}
}
],
"category": "architecture",
"name": "aarch64_ilp32"
},
{
"branches": [
{
"category": "product_version",
"name": "bsdtar-3.1.2-26.6.1.i586",
"product": {
"name": "bsdtar-3.1.2-26.6.1.i586",
"product_id": "bsdtar-3.1.2-26.6.1.i586"
}
},
{
"category": "product_version",
"name": "libarchive-devel-3.1.2-26.6.1.i586",
"product": {
"name": "libarchive-devel-3.1.2-26.6.1.i586",
"product_id": "libarchive-devel-3.1.2-26.6.1.i586"
}
},
{
"category": "product_version",
"name": "libarchive13-3.1.2-26.6.1.i586",
"product": {
"name": "libarchive13-3.1.2-26.6.1.i586",
"product_id": "libarchive13-3.1.2-26.6.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "bsdtar-3.1.2-26.6.1.ppc64le",
"product": {
"name": "bsdtar-3.1.2-26.6.1.ppc64le",
"product_id": "bsdtar-3.1.2-26.6.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libarchive-devel-3.1.2-26.6.1.ppc64le",
"product": {
"name": "libarchive-devel-3.1.2-26.6.1.ppc64le",
"product_id": "libarchive-devel-3.1.2-26.6.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libarchive13-3.1.2-26.6.1.ppc64le",
"product": {
"name": "libarchive13-3.1.2-26.6.1.ppc64le",
"product_id": "libarchive13-3.1.2-26.6.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "bsdtar-3.1.2-26.6.1.s390",
"product": {
"name": "bsdtar-3.1.2-26.6.1.s390",
"product_id": "bsdtar-3.1.2-26.6.1.s390"
}
},
{
"category": "product_version",
"name": "libarchive-devel-3.1.2-26.6.1.s390",
"product": {
"name": "libarchive-devel-3.1.2-26.6.1.s390",
"product_id": "libarchive-devel-3.1.2-26.6.1.s390"
}
},
{
"category": "product_version",
"name": "libarchive13-3.1.2-26.6.1.s390",
"product": {
"name": "libarchive13-3.1.2-26.6.1.s390",
"product_id": "libarchive13-3.1.2-26.6.1.s390"
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "bsdtar-3.1.2-26.6.1.s390x",
"product": {
"name": "bsdtar-3.1.2-26.6.1.s390x",
"product_id": "bsdtar-3.1.2-26.6.1.s390x"
}
},
{
"category": "product_version",
"name": "libarchive-devel-3.1.2-26.6.1.s390x",
"product": {
"name": "libarchive-devel-3.1.2-26.6.1.s390x",
"product_id": "libarchive-devel-3.1.2-26.6.1.s390x"
}
},
{
"category": "product_version",
"name": "libarchive13-3.1.2-26.6.1.s390x",
"product": {
"name": "libarchive13-3.1.2-26.6.1.s390x",
"product_id": "libarchive13-3.1.2-26.6.1.s390x"
}
},
{
"category": "product_version",
"name": "libarchive13-32bit-3.1.2-26.6.1.s390x",
"product": {
"name": "libarchive13-32bit-3.1.2-26.6.1.s390x",
"product_id": "libarchive13-32bit-3.1.2-26.6.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "bsdtar-3.1.2-26.6.1.x86_64",
"product": {
"name": "bsdtar-3.1.2-26.6.1.x86_64",
"product_id": "bsdtar-3.1.2-26.6.1.x86_64"
}
},
{
"category": "product_version",
"name": "libarchive-devel-3.1.2-26.6.1.x86_64",
"product": {
"name": "libarchive-devel-3.1.2-26.6.1.x86_64",
"product_id": "libarchive-devel-3.1.2-26.6.1.x86_64"
}
},
{
"category": "product_version",
"name": "libarchive13-3.1.2-26.6.1.x86_64",
"product": {
"name": "libarchive13-3.1.2-26.6.1.x86_64",
"product_id": "libarchive13-3.1.2-26.6.1.x86_64"
}
},
{
"category": "product_version",
"name": "libarchive13-32bit-3.1.2-26.6.1.x86_64",
"product": {
"name": "libarchive13-32bit-3.1.2-26.6.1.x86_64",
"product_id": "libarchive13-32bit-3.1.2-26.6.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 12 SP4",
"product": {
"name": "SUSE Linux Enterprise Desktop 12 SP4",
"product_id": "SUSE Linux Enterprise Desktop 12 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:12:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 12 SP4",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 12 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-sdk:12:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-sdk:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP4",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.1.2-26.6.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP4",
"product_id": "SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64"
},
"product_reference": "libarchive13-3.1.2-26.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.1.2-26.6.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64"
},
"product_reference": "libarchive-devel-3.1.2-26.6.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.1.2-26.6.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le"
},
"product_reference": "libarchive-devel-3.1.2-26.6.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.1.2-26.6.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x"
},
"product_reference": "libarchive-devel-3.1.2-26.6.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.1.2-26.6.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64"
},
"product_reference": "libarchive-devel-3.1.2-26.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.1.2-26.6.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64"
},
"product_reference": "libarchive-devel-3.1.2-26.6.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.1.2-26.6.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le"
},
"product_reference": "libarchive-devel-3.1.2-26.6.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.1.2-26.6.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x"
},
"product_reference": "libarchive-devel-3.1.2-26.6.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive-devel-3.1.2-26.6.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
},
"product_reference": "libarchive-devel-3.1.2-26.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.1.2-26.6.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64"
},
"product_reference": "libarchive13-3.1.2-26.6.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.1.2-26.6.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le"
},
"product_reference": "libarchive13-3.1.2-26.6.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.1.2-26.6.1.s390x as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x"
},
"product_reference": "libarchive13-3.1.2-26.6.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.1.2-26.6.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
"product_id": "SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64"
},
"product_reference": "libarchive13-3.1.2-26.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.1.2-26.6.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64"
},
"product_reference": "libarchive13-3.1.2-26.6.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.1.2-26.6.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le"
},
"product_reference": "libarchive13-3.1.2-26.6.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.1.2-26.6.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x"
},
"product_reference": "libarchive13-3.1.2-26.6.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.1.2-26.6.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64"
},
"product_reference": "libarchive13-3.1.2-26.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.1.2-26.6.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64"
},
"product_reference": "libarchive13-3.1.2-26.6.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.1.2-26.6.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le"
},
"product_reference": "libarchive13-3.1.2-26.6.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.1.2-26.6.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x"
},
"product_reference": "libarchive13-3.1.2-26.6.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.1.2-26.6.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64"
},
"product_reference": "libarchive13-3.1.2-26.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.1.2-26.6.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64"
},
"product_reference": "libarchive13-3.1.2-26.6.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.1.2-26.6.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le"
},
"product_reference": "libarchive13-3.1.2-26.6.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.1.2-26.6.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x"
},
"product_reference": "libarchive13-3.1.2-26.6.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libarchive13-3.1.2-26.6.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64"
},
"product_reference": "libarchive13-3.1.2-26.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-10209",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-10209"
}
],
"notes": [
{
"category": "general",
"text": "The archive_wstring_append_from_mbs function in archive_string.c in libarchive 3.2.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted archive file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-10209",
"url": "https://www.suse.com/security/cve/CVE-2016-10209"
},
{
"category": "external",
"summary": "SUSE Bug 1032089 for CVE-2016-10209",
"url": "https://bugzilla.suse.com/1032089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-28T14:44:46Z",
"details": "moderate"
}
],
"title": "CVE-2016-10209"
},
{
"cve": "CVE-2016-10349",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-10349"
}
],
"notes": [
{
"category": "general",
"text": "The archive_le32dec function in archive_endian.h in libarchive 3.2.2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-10349",
"url": "https://www.suse.com/security/cve/CVE-2016-10349"
},
{
"category": "external",
"summary": "SUSE Bug 1037008 for CVE-2016-10349",
"url": "https://bugzilla.suse.com/1037008"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-28T14:44:46Z",
"details": "moderate"
}
],
"title": "CVE-2016-10349"
},
{
"cve": "CVE-2016-10350",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-10350"
}
],
"notes": [
{
"category": "general",
"text": "The archive_read_format_cab_read_header function in archive_read_support_format_cab.c in libarchive 3.2.2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-10350",
"url": "https://www.suse.com/security/cve/CVE-2016-10350"
},
{
"category": "external",
"summary": "SUSE Bug 1037009 for CVE-2016-10350",
"url": "https://bugzilla.suse.com/1037009"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-28T14:44:46Z",
"details": "moderate"
}
],
"title": "CVE-2016-10350"
},
{
"cve": "CVE-2017-14501",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-14501"
}
],
"notes": [
{
"category": "general",
"text": "An out-of-bounds read flaw exists in parse_file_info in archive_read_support_format_iso9660.c in libarchive 3.3.2 when extracting a specially crafted iso9660 iso file, related to archive_read_format_iso9660_read_header.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-14501",
"url": "https://www.suse.com/security/cve/CVE-2017-14501"
},
{
"category": "external",
"summary": "SUSE Bug 1059139 for CVE-2017-14501",
"url": "https://bugzilla.suse.com/1059139"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-28T14:44:46Z",
"details": "low"
}
],
"title": "CVE-2017-14501"
},
{
"cve": "CVE-2017-14502",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-14502"
}
],
"notes": [
{
"category": "general",
"text": "read_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archive_read_format_rar_read_header.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-14502",
"url": "https://www.suse.com/security/cve/CVE-2017-14502"
},
{
"category": "external",
"summary": "SUSE Bug 1059134 for CVE-2017-14502",
"url": "https://bugzilla.suse.com/1059134"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-28T14:44:46Z",
"details": "low"
}
],
"title": "CVE-2017-14502"
},
{
"cve": "CVE-2018-1000877",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1000877"
}
],
"notes": [
{
"category": "general",
"text": "libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-415: Double Free vulnerability in RAR decoder - libarchive/archive_read_support_format_rar.c, parse_codes(), realloc(rar-\u003elzss.window, new_size) with new_size = 0 that can result in Crash/DoS. This attack appear to be exploitable via the victim must open a specially crafted RAR archive.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1000877",
"url": "https://www.suse.com/security/cve/CVE-2018-1000877"
},
{
"category": "external",
"summary": "SUSE Bug 1120653 for CVE-2018-1000877",
"url": "https://bugzilla.suse.com/1120653"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-28T14:44:46Z",
"details": "low"
}
],
"title": "CVE-2018-1000877"
},
{
"cve": "CVE-2018-1000878",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1000878"
}
],
"notes": [
{
"category": "general",
"text": "libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-416: Use After Free vulnerability in RAR decoder - libarchive/archive_read_support_format_rar.c that can result in Crash/DoS - it is unknown if RCE is possible. This attack appear to be exploitable via the victim must open a specially crafted RAR archive.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1000878",
"url": "https://www.suse.com/security/cve/CVE-2018-1000878"
},
{
"category": "external",
"summary": "SUSE Bug 1120654 for CVE-2018-1000878",
"url": "https://bugzilla.suse.com/1120654"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-28T14:44:46Z",
"details": "moderate"
}
],
"title": "CVE-2018-1000878"
},
{
"cve": "CVE-2019-1000019",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-1000019"
}
],
"notes": [
{
"category": "general",
"text": "libarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9a757c1 onwards (release v3.0.2 onwards) contains a CWE-125: Out-of-bounds Read vulnerability in 7zip decompression, archive_read_support_format_7zip.c, header_bytes() that can result in a crash (denial of service). This attack appears to be exploitable via the victim opening a specially crafted 7zip file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-1000019",
"url": "https://www.suse.com/security/cve/CVE-2019-1000019"
},
{
"category": "external",
"summary": "SUSE Bug 1124341 for CVE-2019-1000019",
"url": "https://bugzilla.suse.com/1124341"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-28T14:44:46Z",
"details": "low"
}
],
"title": "CVE-2019-1000019"
},
{
"cve": "CVE-2019-1000020",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-1000020"
}
],
"notes": [
{
"category": "general",
"text": "libarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb139961 onwards (version v2.8.0 onwards) contains a CWE-835: Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027) vulnerability in ISO9660 parser, archive_read_support_format_iso9660.c, read_CE()/parse_rockridge() that can result in DoS by infinite loop. This attack appears to be exploitable via the victim opening a specially crafted ISO9660 file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-1000020",
"url": "https://www.suse.com/security/cve/CVE-2019-1000020"
},
{
"category": "external",
"summary": "SUSE Bug 1124342 for CVE-2019-1000020",
"url": "https://bugzilla.suse.com/1124342"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-28T14:44:46Z",
"details": "low"
}
],
"title": "CVE-2019-1000020"
},
{
"cve": "CVE-2019-18408",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-18408"
}
],
"notes": [
{
"category": "general",
"text": "archive_read_format_rar_read_data in archive_read_support_format_rar.c in libarchive before 3.4.0 has a use-after-free in a certain ARCHIVE_FAILED situation, related to Ppmd7_DecodeSymbol.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-18408",
"url": "https://www.suse.com/security/cve/CVE-2019-18408"
},
{
"category": "external",
"summary": "SUSE Bug 1155079 for CVE-2019-18408",
"url": "https://bugzilla.suse.com/1155079"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP4:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libarchive13-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP4:libarchive-devel-3.1.2-26.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libarchive-devel-3.1.2-26.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-11-28T14:44:46Z",
"details": "moderate"
}
],
"title": "CVE-2019-18408"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…