Wind River Support Network

HomeDefectsLIN1022-307

Fixed

LIN1022-307 : Security Advisory - libarchive - CVE-2021-31566

Created: Apr 29, 2022 Updated: Sep 27, 2022

Resolved Date: Jul 20, 2022

Found In Version: 10.22.33.1

Severity: Standard

Applicable for: Wind River Linux LTS 22

Component/s: Userspace

Description

libarchive: symbolic links incorrectly followed when changing modes, times, ACL and flags of a file while extracting an archive

https://github.com/libarchive/libarchive/issues/1566

CREATE(Triage):(User=admin) CVE-2021-31566 (https://nvd.nist.gov/vuln/detail/CVE-2021-31566)

CVEs

CVE-2021-31566