Security update for bsdtar SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2016:1939-1 Final 1 1 2016-08-02T11:41:26Z current 2016-08-02T11:41:26Z 2016-08-02T11:41:26Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for bsdtar bsdtar was updated to fix seven security issues. These security issues were fixed: - CVE-2015-8929: Memory leak in tar parser (bsc#985669). - CVE-2016-4809: Memory allocate error with symbolic links in cpio archives (bsc#984990). - CVE-2015-8920: Stack out of bounds read in ar parser (bsc#985675). - CVE-2015-8921: Global out of bounds read in mtree parser (bsc#985682). - CVE-2015-8924: Heap buffer read overflow in tar (bsc#985609). - CVE-2015-8918: Overlapping memcpy in CAB parser (bsc#985698). - CVE-2015-2304: Reject absolute paths in input mode of bsdcpio exactly when '..' is rejected (bsc#920870). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sdksp4-bsdtar-12672,sleclo50sp3-bsdtar-12672,sleman21-bsdtar-12672,slemap21-bsdtar-12672,sleposp3-bsdtar-12672,slessp2-bsdtar-12672,slessp3-bsdtar-12672,slessp4-bsdtar-12672,slestso13-bsdtar-12672 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2016/suse-su-20161939-1/ Link for SUSE-SU-2016:1939-1 https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00001.html E-Mail link for SUSE-SU-2016:1939-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/920870 SUSE Bug 920870 https://bugzilla.suse.com/984990 SUSE Bug 984990 https://bugzilla.suse.com/985609 SUSE Bug 985609 https://bugzilla.suse.com/985669 SUSE Bug 985669 https://bugzilla.suse.com/985675 SUSE Bug 985675 https://bugzilla.suse.com/985682 SUSE Bug 985682 https://bugzilla.suse.com/985698 SUSE Bug 985698 https://www.suse.com/security/cve/CVE-2015-2304/ SUSE CVE CVE-2015-2304 page https://www.suse.com/security/cve/CVE-2015-8918/ SUSE CVE CVE-2015-8918 page https://www.suse.com/security/cve/CVE-2015-8920/ SUSE CVE CVE-2015-8920 page https://www.suse.com/security/cve/CVE-2015-8921/ SUSE CVE CVE-2015-8921 page https://www.suse.com/security/cve/CVE-2015-8924/ SUSE CVE CVE-2015-8924 page https://www.suse.com/security/cve/CVE-2015-8929/ SUSE CVE CVE-2015-8929 page https://www.suse.com/security/cve/CVE-2016-4809/ SUSE CVE CVE-2016-4809 page SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Manager 2.1 SUSE Manager Proxy 2.1 SUSE OpenStack Cloud 5 SUSE Studio Onsite 1.3 libarchive-devel-2.5.5-9.1 libarchive2-2.5.5-9.1 libarchive2-2.5.5-9.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 libarchive2-2.5.5-9.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS libarchive2-2.5.5-9.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS libarchive2-2.5.5-9.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libarchive2-2.5.5-9.1 as a component of SUSE Linux Enterprise Server 11 SP4 libarchive2-2.5.5-9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libarchive-devel-2.5.5-9.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libarchive2-2.5.5-9.1 as a component of SUSE Manager 2.1 libarchive2-2.5.5-9.1 as a component of SUSE Manager Proxy 2.1 libarchive2-2.5.5-9.1 as a component of SUSE OpenStack Cloud 5 libarchive-devel-2.5.5-9.1 as a component of SUSE Studio Onsite 1.3 Absolute path traversal vulnerability in bsdcpio in libarchive 3.1.2 and earlier allows remote attackers to write to arbitrary files via a full pathname in an archive. CVE-2015-2304 SUSE Linux Enterprise Point of Sale 11 SP3:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server 11 SP4:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libarchive-devel-2.5.5-9.1 SUSE Manager 2.1:libarchive2-2.5.5-9.1 SUSE Manager Proxy 2.1:libarchive2-2.5.5-9.1 SUSE OpenStack Cloud 5:libarchive2-2.5.5-9.1 SUSE Studio Onsite 1.3:libarchive-devel-2.5.5-9.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161939-1/ https://www.suse.com/security/cve/CVE-2015-2304.html CVE-2015-2304 https://bugzilla.suse.com/920870 SUSE Bug 920870 The archive_string_append function in archive_string.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted cab files, related to "overlapping memcpy." CVE-2015-8918 SUSE Linux Enterprise Point of Sale 11 SP3:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server 11 SP4:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libarchive-devel-2.5.5-9.1 SUSE Manager 2.1:libarchive2-2.5.5-9.1 SUSE Manager Proxy 2.1:libarchive2-2.5.5-9.1 SUSE OpenStack Cloud 5:libarchive2-2.5.5-9.1 SUSE Studio Onsite 1.3:libarchive-devel-2.5.5-9.1 moderate 5.8 AV:N/AC:M/Au:N/C:N/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161939-1/ https://www.suse.com/security/cve/CVE-2015-8918.html CVE-2015-8918 https://bugzilla.suse.com/985698 SUSE Bug 985698 The _ar_read_header function in archive_read_support_format_ar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds stack read) via a crafted ar file. CVE-2015-8920 SUSE Linux Enterprise Point of Sale 11 SP3:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server 11 SP4:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libarchive-devel-2.5.5-9.1 SUSE Manager 2.1:libarchive2-2.5.5-9.1 SUSE Manager Proxy 2.1:libarchive2-2.5.5-9.1 SUSE OpenStack Cloud 5:libarchive2-2.5.5-9.1 SUSE Studio Onsite 1.3:libarchive-devel-2.5.5-9.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161939-1/ https://www.suse.com/security/cve/CVE-2015-8920.html CVE-2015-8920 https://bugzilla.suse.com/985675 SUSE Bug 985675 The ae_strtofflags function in archive_entry.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mtree file. CVE-2015-8921 SUSE Linux Enterprise Point of Sale 11 SP3:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server 11 SP4:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libarchive-devel-2.5.5-9.1 SUSE Manager 2.1:libarchive2-2.5.5-9.1 SUSE Manager Proxy 2.1:libarchive2-2.5.5-9.1 SUSE OpenStack Cloud 5:libarchive2-2.5.5-9.1 SUSE Studio Onsite 1.3:libarchive-devel-2.5.5-9.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161939-1/ https://www.suse.com/security/cve/CVE-2015-8921.html CVE-2015-8921 https://bugzilla.suse.com/985682 SUSE Bug 985682 The archive_read_format_tar_read_header function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tar file. CVE-2015-8924 SUSE Linux Enterprise Point of Sale 11 SP3:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server 11 SP4:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libarchive-devel-2.5.5-9.1 SUSE Manager 2.1:libarchive2-2.5.5-9.1 SUSE Manager Proxy 2.1:libarchive2-2.5.5-9.1 SUSE OpenStack Cloud 5:libarchive2-2.5.5-9.1 SUSE Studio Onsite 1.3:libarchive-devel-2.5.5-9.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161939-1/ https://www.suse.com/security/cve/CVE-2015-8924.html CVE-2015-8924 https://bugzilla.suse.com/985609 SUSE Bug 985609 Memory leak in the __archive_read_get_extract function in archive_read_extract2.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service via a tar file. CVE-2015-8929 SUSE Linux Enterprise Point of Sale 11 SP3:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server 11 SP4:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libarchive-devel-2.5.5-9.1 SUSE Manager 2.1:libarchive2-2.5.5-9.1 SUSE Manager Proxy 2.1:libarchive2-2.5.5-9.1 SUSE OpenStack Cloud 5:libarchive2-2.5.5-9.1 SUSE Studio Onsite 1.3:libarchive-devel-2.5.5-9.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161939-1/ https://www.suse.com/security/cve/CVE-2015-8929.html CVE-2015-8929 https://bugzilla.suse.com/985669 SUSE Bug 985669 The archive_read_format_cpio_read_header function in archive_read_support_format_cpio.c in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) via a CPIO archive with a large symlink. CVE-2016-4809 SUSE Linux Enterprise Point of Sale 11 SP3:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server 11 SP4:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libarchive2-2.5.5-9.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libarchive-devel-2.5.5-9.1 SUSE Manager 2.1:libarchive2-2.5.5-9.1 SUSE Manager Proxy 2.1:libarchive2-2.5.5-9.1 SUSE OpenStack Cloud 5:libarchive2-2.5.5-9.1 SUSE Studio Onsite 1.3:libarchive-devel-2.5.5-9.1 low 1.9 AV:L/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161939-1/ https://www.suse.com/security/cve/CVE-2016-4809.html CVE-2016-4809 https://bugzilla.suse.com/984990 SUSE Bug 984990