diff --git a/SPECS/libarchive.spec b/SPECS/libarchive.spec index 82b00da..8f58511 100644 --- a/SPECS/libarchive.spec +++ b/SPECS/libarchive.spec @@ -2,7 +2,7 @@ Name: libarchive Version: 3.3.2 -Release: 8%{?dist} +Release: 9%{?dist} Summary: A library for handling streaming archive formats License: BSD @@ -17,6 +17,7 @@ Patch4: libarchive-3.3.2-CVE-2018-1000877.patch Patch5: fix-use-after-free-in-delayed-newc.patch Patch6: fix-few-obvious-resource-leaks-covscan.patch Patch7: libarchive-3.3.2-CVE-2019-18408.patch +Patch8: libarchive-3.3.2-CVE-2019-19221.patch BuildRequires: gcc BuildRequires: bison @@ -220,6 +221,9 @@ run_testsuite %changelog +* Tue Mar 24 2020 Ondrej Dubaj - 3.3.2-9 +- Fix out-of-bounds read (CVE-2019-19221) (#1803967) + * Wed Jan 15 2020 Patrik Novotný - 3.3.2-8 - Fix CVE-2019-18408: RAR use-after-free