Ubuntu
libarchive package

libarchive 3.4.0-1ubuntu0.1 source package in Ubuntu

Changelog

libarchive (3.4.0-1ubuntu0.1) eoan-security; urgency=medium

  * SECURITY UPDATE: Out-of-read and Denial of service
    - debian/patches/CVE-2019-19221.patch: Bugfix and optimize
      archive_wstring_append_from_mbs() in libarchive/archive_string.c.
    - CVE-2019-19221
  * SECURITY UPDATE: SIGSEGV denial of service
    - debian/patches/CVE-2020-9308.patch: reject files that
      declare invalid header flags fix in
      libarchive/archive_read_support_format_rar5.c,
      libarchive/test/test_read_format_rar5.c,
      libarchive/test/test_read_format_rar5_block_size_is_too_small.rar.uu.
    - CVE-2020-9308

 -- <email address hidden> (Leonidas S. Barbosa)  Thu, 20 Feb 2020 14:58:57 -0300

Upload details

Uploaded by:
Leonidas S. Barbosa
Uploaded to:
Eoan
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
libarchive_3.4.0.orig.tar.gz 6.6 MiB 8643d50ed40c759f5412a3af4e353cffbce4fdf3b5cf321cb72cacf06b2d825e
libarchive_3.4.0.orig.tar.gz.asc 833 bytes 5aa9d657d9d2f2481a8dce1bab4c733cfc18657b451f6551d60f37cce4ca2f57
libarchive_3.4.0-1ubuntu0.1.debian.tar.xz 39.5 KiB 151b67f9f50a049ad82b11951ab16c5067c1935625edab8df25a4e685f2606ee
libarchive_3.4.0-1ubuntu0.1.dsc 2.5 KiB 0f8c164b9b37caf49ec15de9ea3a4469a8322d8b56df2547ac64d36b4126efae

View changes file

Binary packages built by this source

libarchive-dev: No summary available for libarchive-dev in ubuntu eoan.

No description available for libarchive-dev in ubuntu eoan.

libarchive-tools: No summary available for libarchive-tools in ubuntu eoan.

No description available for libarchive-tools in ubuntu eoan.

libarchive-tools-dbgsym: No summary available for libarchive-tools-dbgsym in ubuntu eoan.

No description available for libarchive-tools-dbgsym in ubuntu eoan.

libarchive13: No summary available for libarchive13 in ubuntu eoan.

No description available for libarchive13 in ubuntu eoan.

libarchive13-dbgsym: No summary available for libarchive13-dbgsym in ubuntu eoan.

No description available for libarchive13-dbgsym in ubuntu eoan.