Security update for unrar SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:2834-1 Final 1 1 2021-08-25T10:26:54Z current 2021-08-25T10:26:54Z 2021-08-25T10:26:54Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for unrar This update for unrar to version 5.6.1 fixes several issues. These security issues were fixed: - CVE-2017-12938: Prevent remote attackers to bypass a directory-traversal protection mechanism via vectors involving a symlink to the . directory, a symlink to the .. directory, and a regular file (bsc#1054038). - CVE-2017-12940: Prevent out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function (bsc#1054038). - CVE-2017-12941: Prevent an out-of-bounds read in the Unpack::Unpack20 function (bsc#1054038). - CVE-2017-12942: Prevent a buffer overflow in the Unpack::LongLZ function (bsc#1054038). - CVE-2017-20006: Fixed heap-based buffer overflow in Unpack:CopyString (bsc#1187974). These non-security issues were fixed: - Added extraction support for .LZ archives created by Lzip compressor - Enable unpacking of files in ZIP archives compressed with XZ algorithm and encrypted with AES - Added support for PAX extended headers inside of TAR archive - If RAR recovery volumes (.rev files) are present in the same folder as usual RAR volumes, archive test command verifies .rev contents after completing testing .rar files - By default unrar skips symbolic links with absolute paths in link target when extracting unless -ola command line switch is specified - Added support for AES-NI CPU instructions - Support for a new RAR 5.0 archiving format - Wildcard exclusion mask for folders - Prevent conditional jumps depending on uninitialised values (bsc#1046882) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2021-2834,SUSE-OpenStack-Cloud-8-2021-2834,SUSE-OpenStack-Cloud-9-2021-2834,SUSE-OpenStack-Cloud-Crowbar-9-2021-2834,SUSE-SLE-SAP-12-SP3-2021-2834,SUSE-SLE-SAP-12-SP4-2021-2834,SUSE-SLE-SDK-12-SP5-2021-2834,SUSE-SLE-SERVER-12-SP2-BCL-2021-2834,SUSE-SLE-SERVER-12-SP3-2021-2834,SUSE-SLE-SERVER-12-SP3-BCL-2021-2834,SUSE-SLE-SERVER-12-SP4-LTSS-2021-2834,SUSE-SLE-SERVER-12-SP5-2021-2834 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-20212834-1/ Link for SUSE-SU-2021:2834-1 https://lists.suse.com/pipermail/sle-security-updates/2021-August/009355.html E-Mail link for SUSE-SU-2021:2834-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1046882 SUSE Bug 1046882 https://bugzilla.suse.com/1054038 SUSE Bug 1054038 https://bugzilla.suse.com/1187974 SUSE Bug 1187974 https://www.suse.com/security/cve/CVE-2012-6706/ SUSE CVE CVE-2012-6706 page https://www.suse.com/security/cve/CVE-2017-12938/ SUSE CVE CVE-2017-12938 page https://www.suse.com/security/cve/CVE-2017-12940/ SUSE CVE CVE-2017-12940 page https://www.suse.com/security/cve/CVE-2017-12941/ SUSE CVE CVE-2017-12941 page https://www.suse.com/security/cve/CVE-2017-12942/ SUSE CVE CVE-2017-12942 page https://www.suse.com/security/cve/CVE-2017-20006/ SUSE CVE CVE-2017-20006 page SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9 libunrar-devel-5.6.1-4.5.1 libunrar5_6_1-5.6.1-4.5.1 unrar-5.6.1-4.5.1 unrar-5.6.1-4.5.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL unrar-5.6.1-4.5.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL unrar-5.6.1-4.5.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS unrar-5.6.1-4.5.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS unrar-5.6.1-4.5.1 as a component of SUSE Linux Enterprise Server 12 SP5 unrar-5.6.1-4.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 unrar-5.6.1-4.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 unrar-5.6.1-4.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libunrar-devel-5.6.1-4.5.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libunrar5_6_1-5.6.1-4.5.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 unrar-5.6.1-4.5.1 as a component of SUSE OpenStack Cloud 8 unrar-5.6.1-4.5.1 as a component of SUSE OpenStack Cloud 9 unrar-5.6.1-4.5.1 as a component of SUSE OpenStack Cloud Crowbar 9 A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and other products, that can lead to arbitrary code execution. An integer overflow can be caused in DataSize+CurChannel. The result is a negative value of the "DestPos" variable, which allows the attacker to write out of bounds when setting Mem[DestPos]. CVE-2012-6706 SUSE Linux Enterprise Server 12 SP2-BCL:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server 12 SP3-BCL:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server 12 SP3-LTSS:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server 12 SP4-LTSS:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server 12 SP5:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libunrar-devel-5.6.1-4.5.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libunrar5_6_1-5.6.1-4.5.1 SUSE OpenStack Cloud 8:unrar-5.6.1-4.5.1 SUSE OpenStack Cloud 9:unrar-5.6.1-4.5.1 SUSE OpenStack Cloud Crowbar 9:unrar-5.6.1-4.5.1 critical 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20212834-1/ https://www.suse.com/security/cve/CVE-2012-6706.html CVE-2012-6706 https://bugzilla.suse.com/1045315 SUSE Bug 1045315 https://bugzilla.suse.com/1045490 SUSE Bug 1045490 https://bugzilla.suse.com/1053919 SUSE Bug 1053919 https://bugzilla.suse.com/1083915 SUSE Bug 1083915 UnRAR before 5.5.7 allows remote attackers to bypass a directory-traversal protection mechanism via vectors involving a symlink to the . directory, a symlink to the .. directory, and a regular file. CVE-2017-12938 SUSE Linux Enterprise Server 12 SP2-BCL:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server 12 SP3-BCL:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server 12 SP3-LTSS:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server 12 SP4-LTSS:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server 12 SP5:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libunrar-devel-5.6.1-4.5.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libunrar5_6_1-5.6.1-4.5.1 SUSE OpenStack Cloud 8:unrar-5.6.1-4.5.1 SUSE OpenStack Cloud 9:unrar-5.6.1-4.5.1 SUSE OpenStack Cloud Crowbar 9:unrar-5.6.1-4.5.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20212834-1/ https://www.suse.com/security/cve/CVE-2017-12938.html CVE-2017-12938 https://bugzilla.suse.com/1054038 SUSE Bug 1054038 libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function. CVE-2017-12940 SUSE Linux Enterprise Server 12 SP2-BCL:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server 12 SP3-BCL:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server 12 SP3-LTSS:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server 12 SP4-LTSS:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server 12 SP5:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libunrar-devel-5.6.1-4.5.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libunrar5_6_1-5.6.1-4.5.1 SUSE OpenStack Cloud 8:unrar-5.6.1-4.5.1 SUSE OpenStack Cloud 9:unrar-5.6.1-4.5.1 SUSE OpenStack Cloud Crowbar 9:unrar-5.6.1-4.5.1 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20212834-1/ https://www.suse.com/security/cve/CVE-2017-12940.html CVE-2017-12940 https://bugzilla.suse.com/1054038 SUSE Bug 1054038 https://bugzilla.suse.com/1196772 SUSE Bug 1196772 https://bugzilla.suse.com/1196774 SUSE Bug 1196774 libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function. CVE-2017-12941 SUSE Linux Enterprise Server 12 SP2-BCL:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server 12 SP3-BCL:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server 12 SP3-LTSS:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server 12 SP4-LTSS:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server 12 SP5:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libunrar-devel-5.6.1-4.5.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libunrar5_6_1-5.6.1-4.5.1 SUSE OpenStack Cloud 8:unrar-5.6.1-4.5.1 SUSE OpenStack Cloud 9:unrar-5.6.1-4.5.1 SUSE OpenStack Cloud Crowbar 9:unrar-5.6.1-4.5.1 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20212834-1/ https://www.suse.com/security/cve/CVE-2017-12941.html CVE-2017-12941 https://bugzilla.suse.com/1054038 SUSE Bug 1054038 https://bugzilla.suse.com/1196772 SUSE Bug 1196772 https://bugzilla.suse.com/1196774 SUSE Bug 1196774 libunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function. CVE-2017-12942 SUSE Linux Enterprise Server 12 SP2-BCL:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server 12 SP3-BCL:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server 12 SP3-LTSS:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server 12 SP4-LTSS:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server 12 SP5:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libunrar-devel-5.6.1-4.5.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libunrar5_6_1-5.6.1-4.5.1 SUSE OpenStack Cloud 8:unrar-5.6.1-4.5.1 SUSE OpenStack Cloud 9:unrar-5.6.1-4.5.1 SUSE OpenStack Cloud Crowbar 9:unrar-5.6.1-4.5.1 moderate 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20212834-1/ https://www.suse.com/security/cve/CVE-2017-12942.html CVE-2017-12942 https://bugzilla.suse.com/1054038 SUSE Bug 1054038 https://bugzilla.suse.com/1054600 SUSE Bug 1054600 https://bugzilla.suse.com/1196772 SUSE Bug 1196772 https://bugzilla.suse.com/1196774 SUSE Bug 1196774 UnRAR 5.6.1.2 and 5.6.1.3 has a heap-based buffer overflow in Unpack::CopyString (called from Unpack::Unpack5 and CmdExtract::ExtractCurrentFile). CVE-2017-20006 SUSE Linux Enterprise Server 12 SP2-BCL:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server 12 SP3-BCL:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server 12 SP3-LTSS:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server 12 SP4-LTSS:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server 12 SP5:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:unrar-5.6.1-4.5.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libunrar-devel-5.6.1-4.5.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libunrar5_6_1-5.6.1-4.5.1 SUSE OpenStack Cloud 8:unrar-5.6.1-4.5.1 SUSE OpenStack Cloud 9:unrar-5.6.1-4.5.1 SUSE OpenStack Cloud Crowbar 9:unrar-5.6.1-4.5.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20212834-1/ https://www.suse.com/security/cve/CVE-2017-20006.html CVE-2017-20006 https://bugzilla.suse.com/1187974 SUSE Bug 1187974