Re: HFS+ specific vulnerability

To: debian-lts@lists.debian.org
Subject: Re: HFS+ specific vulnerability
From: Brian May <bam@debian.org>
Date: Tue, 07 Jun 2016 08:32:01 +1000
Message-id: <[🔎] 87inxm54pq.fsf@prune.linuxpenguins.xyz>
In-reply-to: <[🔎] 87zir27kqw.fsf@prune.linuxpenguins.xyz>
References: <[🔎] 871t4g9h01.fsf@prune.linuxpenguins.xyz> <[🔎] 1464853872.2847.92.camel@decadent.org.uk> <[🔎] 8760tq91jf.fsf@prune.linuxpenguins.xyz> <[🔎] 8737ou8zpp.fsf@prune.linuxpenguins.xyz> <[🔎] 87zir27kqw.fsf@prune.linuxpenguins.xyz>

Brian May <bam@debian.org> writes:

> Just realized I have been talking a lot of nonsense. UDF support isn't
> about compressing files from UDF file systems, it is about compressing
> UDF images. So yes, it is a format issue like Ben said, and it should
> get fixed.

I have a version available for testing with a fix for the UDF issue
(CVE-2016-2335):

https://people.debian.org/~bam/debian/pool/main/p/p7zip/

(only i386 version so far, hope to upload amd64 version ASAP).
-- 
Brian May <bam@debian.org>

Reply to:

Follow-Ups:
- Re: HFS+ specific vulnerability
  - From: Brian May <bam@debian.org>

References:
- HFS+ specific vulnerability
  - From: Brian May <brian@linuxpenguins.xyz>
- Re: HFS+ specific vulnerability
  - From: Ben Hutchings <ben@decadent.org.uk>
- Re: HFS+ specific vulnerability
  - From: Brian May <bam@debian.org>
- Re: HFS+ specific vulnerability
  - From: Brian May <bam@debian.org>
- Re: HFS+ specific vulnerability
  - From: Brian May <bam@debian.org>

Prev by Date: Re: Wheezy update of qemu-kvm?
Next by Date: Re: Wheezy update of qemu-kvm?
Previous by thread: Re: HFS+ specific vulnerability
Next by thread: Re: HFS+ specific vulnerability
Index(es):
- Date
- Thread