[SECURITY] Fedora EPEL 5 Update: libarchive-2.8.4-5.el5

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-0697
2012-03-06 18:50:35
--------------------------------------------------------------------------------

Name        : libarchive
Product     : Fedora EPEL 5
Version     : 2.8.4
Release     : 5.el5
URL         : http://code.google.com/p/libarchive/
Summary     : A library for handling streaming archive formats
Description :
Libarchive is a programming library that can create and read several different
streaming archive formats, including most popular tar variants, several cpio
formats, and both BSD and GNU ar variants. It can also write shar archives and
read ISO9660 CDROM images and ZIP archives.

--------------------------------------------------------------------------------
Update Information:

Fix ISO support, regression introduced with fix for CVE-2011-1777
Security fixes for CVE-2011-1777 and CVE-2011-1778.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #705849 - CVE-2010-4666 CVE-2011-1777 CVE-2011-1778 CVE-2011-1779 Libarchive multiple security issues
        https://bugzilla.redhat.com/show_bug.cgi?id=705849
--------------------------------------------------------------------------------

This update can be installed with the "yum" update programs.  Use
su -c 'yum update libarchive' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora EPEL GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------