Security update for libarchive

libarchive was updated to fix 20 security issues.

These security issues were fixed:
- CVE-2015-8918: Overlapping memcpy in CAB parser (bsc#985698).
- CVE-2015-8919: Heap out of bounds read in LHA/LZH parser (bsc#985697).
- CVE-2015-8920: Stack out of bounds read in ar parser (bsc#985675).
- CVE-2015-8921: Global out of bounds read in mtree parser (bsc#985682).
- CVE-2015-8922: Null pointer access in 7z parser (bsc#985685).
- CVE-2015-8923: Unclear crashes in ZIP parser (bsc#985703).
- CVE-2015-8924: Heap buffer read overflow in tar (bsc#985609).
- CVE-2015-8925: Unclear invalid memory read in mtree parser (bsc#985706).
- CVE-2015-8926: NULL pointer access in RAR parser (bsc#985704).
- CVE-2015-8928: Heap out of bounds read in mtree parser (bsc#985679).
- CVE-2015-8929: Memory leak in tar parser (bsc#985669).
- CVE-2015-8930: Endless loop in ISO parser (bsc#985700).
- CVE-2015-8931: Undefined behavior / signed integer overflow in mtree parser (bsc#985689).
- CVE-2015-8932: Compress handler left shifting larger than int size (bsc#985665).
- CVE-2015-8933: Undefined behavior / signed integer overflow in TAR parser (bsc#985688).
- CVE-2015-8934: Out of bounds read in RAR (bsc#985673).
- CVE-2016-4300: Heap buffer overflow vulnerability in the 7zip read_SubStreamsInfo (bsc#985832).
- CVE-2016-4301: Stack buffer overflow in the mtree parse_device (bsc#985826).
- CVE-2016-4302: Heap buffer overflow in the Rar decompression functionality (bsc#985835).
- CVE-2016-4809: Memory allocate error with symbolic links in cpio archives (bsc#984990).

This update was imported from the SUSE:SLE-12:Update update project.

Fixed bugs
bnc#984990
VUL-1: CVE-2016-4809: libarchive,bsdtar: Memory allocate error with symbolic links in cpio archives
bnc#985609
VUL-0: CVE-2015-8924: bsdtar,libarchive: heap buffer read overflow in tar
bnc#985665
VUL-1: CVE-2015-8932: bsdtar,libarchive: compress handler left shifting larger than int size
bnc#985669
VUL-1: CVE-2015-8929: bsdtar,libarchive: minor memory leak in tar parser
bnc#985673
VUL-1: CVE-2015-8934: bsdtar,libarchive: out of bounds read in RAR
bnc#985675
VUL-1: CVE-2015-8920: bsdtar,libarchive: Stack out of bounds read in ar parser
bnc#985679
VUL-1: CVE-2015-8928: bsdtar,libarchive: Heap out of bounds read in mtree parser
bnc#985682
VUL-1: CVE-2015-8921: bsdtar,libarchive: Global out of bounds read in mtree parser
bnc#985685
VUL-1: CVE-2015-8922: bsdtar,libarchive: Null pointer access in 7z parser
bnc#985688
VUL-1: CVE-2015-8933: bsdtar,libarchive: Undefined behavior / signed integer overflow in TAR parser
bnc#985689
VUL-1: CVE-2015-8931: bsdtar,libarchive: Undefined behavior / signed integer overflow in mtree parser
bnc#985697
VUL-1: CVE-2015-8919: bsdtar,libarchive: Heap out of bounds read in LHA/LZH parser
bnc#985698
VUL-1: CVE-2015-8918: bsdtar,libarchive: Overlapping memcpy in CAB parser
bnc#985700
VUL-1: CVE-2015-8930: bsdtar,libarchive: Endless loop in ISO parser
bnc#985703
VUL-1: CVE-2015-8923: bsdtar,libarchive: Unclear crashes in ZIP parser
bnc#985704
VUL-1: CVE-2015-8926: bsdtar,libarchive: Null pointer access in RAR parser
bnc#985706
VUL-1: CVE-2015-8925: bsdtar,libarchive: Unclear invalid memory read in mtree parser
bnc#985826
VUL-0: CVE-2016-4301: bsdtar,libarchive: Stack buffer overflow in the mtree parse_device
bnc#985832
VUL-0: CVE-2016-4300: bsdtar,libarchive: Heap buffer overflow vulnerability in the 7zip read_SubStreamsInfo
bnc#985835
VUL-0: CVE-2016-4302: bsdtar,libarchive: Heap buffer overflow in the Rar decompression functionality
Selected Binaries
openSUSE Build Service is sponsored by