PT-2021-30862 · Mageia · Libarchive

Published 2021-09-23 · Updated 2021-09-23

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description The issue concerns the handling of symbolic link ACLs on Linux, where symlinks should not be followed when setting file flags or processing the fixup list.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

MGASA-2021-0430

Affected Products

Libarchive

References · 4

• https://osv.dev/vulnerability/MGASA-2021-0430 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2021-0430.html · Security Note
• https://github.com/libarchive/libarchive/releases/tag/v3.5.2 · Note
• https://bugs.mageia.org/show_bug.cgi?id=29431 · Note