Debian
unrar-nonfree package

  1. Bug #84657 (rarcve)
  2. Comment #5

Comment 5 for bug 84657

Revision history for this message
Martin Meredith (mez) wrote :

Quote from email

All these changes in rarvm.cpp code are related to endianness issue
on big endian computers. So users may notice these fixes only on big
endian machine.

Besides, I forgot to mention that real vulnerability was fixed
in GetPassword function in consio.cpp. So if you use 3.6.x version
of this function, please upgrade it to 3.7.3 code.