git: DragonFly_RELEASE_5_8 libarchive: avoid use-after-free in RAR reader

Daniel Fojt deef at crater.dragonflybsd.org
Thu Sep 24 04:34:02 PDT 2020


commit 32c9443cbc72a5a72c2e6f84c92ea08a3a25c53b
Author: Daniel Fojt <df at neosystem.org>
Date:   Thu Sep 24 13:21:27 2020 +0200

    libarchive: avoid use-after-free in RAR reader
    
    Fixes CVE-2019-18408.
    
    Upstream commit: https://github.com/libarchive/libarchive/commit/b8592ecba2f9e451e1f5cb7ab6dcee8b8e7b3f60

Summary of changes:
 contrib/libarchive/libarchive/archive_read_support_format_rar.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/32c9443cbc72a5a72c2e6f84c92ea08a3a25c53b


-- 
DragonFly BSD source repository


More information about the Commits mailing list