CVE:CVE-2021-31566
CNNVD:CNNVD-202202-1389
libarchive是一款多格式存档和压缩库。
libarchive 存在安全漏洞，该漏洞源于可以通过符号链接模式时间标记修改数据。攻击者可利用该漏洞可以绕过libarchive的访问限制。
solution:Upgrade libarchive libarchive to a higher version than 3.5.2,and avoid the version (,3.5.2); Upgrade fedoraproject fedora to a higher version than 35,and avoid the version 35; Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_eus to a higher version than 8.6,and avoid the version 8.6; Upgrade redhat enterprise_linux_for_ibm_z_systems to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_for_ibm_z_systems_eus to a higher version than 8.6,and avoid the version 8.6; Upgrade redhat enterprise_linux_for_power_little_endian to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_for_power_little_endian_eus to a higher version than 8.6,and avoid the version 8.6; Upgrade redhat enterprise_linux_server_aus to a higher version than 8.6,and avoid the version 8.6; Upgrade redhat enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions to a higher version than 8.6,and avoid the version 8.6; Upgrade redhat enterprise_linux_server_tus to a higher version than 8.6,and avoid the version 8.6; Upgrade redhat codeready_linux_builder to a higher version than -; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0