Upstream bug: https://github.com/libarchive/libarchive/issues/518 Upstream fix: https://github.com/libarchive/libarchive/commit/aab73938 crafted RAR file can trick libarchive into returning to the caller a 128k block of data starting at whatever value was previously in the caller's variable. libarchive-2.8 does not include support for this format.
Created libarchive tracking bugs for this issue: Affects: fedora-all [bug 1352776]
This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Via RHSA-2016:1844 https://rhn.redhat.com/errata/RHSA-2016-1844.html