[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

[SECURITY] [DLA 1668-1] libarchive security update

Package        : libarchive
Version        : 3.1.2-11+deb8u7
CVE ID         : CVE-2019-1000019 CVE-2019-1000020

Fuzzing found two further file-format specific issues in libarchive, a
read-only segfault in 7z, and an infinite loop in ISO9660.


    Out-of-bounds Read vulnerability in 7zip decompression, that can
    result in a crash (denial of service, CWE-125)

    Vulnerability in ISO9660 parser that can result in DoS by infinite
    loop (CWE-835)

For Debian 8 "Jessie", these problems have been fixed in version

We recommend that you upgrade your libarchive packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

Attachment: signature.asc
Description: PGP signature

Reply to: