[ubuntu/eoan-security] libarchive 3.4.0-1ubuntu0.1 (Accepted)

[Leonidas S. Barbosa]

libarchive (3.4.0-1ubuntu0.1) eoan-security; urgency=medium

  * SECURITY UPDATE: Out-of-read and Denial of service
    - debian/patches/CVE-2019-19221.patch: Bugfix and optimize
      archive_wstring_append_from_mbs() in libarchive/archive_string.c.
    - CVE-2019-19221
  * SECURITY UPDATE: SIGSEGV denial of service
    - debian/patches/CVE-2020-9308.patch: reject files that
      declare invalid header flags fix in
      libarchive/archive_read_support_format_rar5.c,
      libarchive/test/test_read_format_rar5.c,
      libarchive/test/test_read_format_rar5_block_size_is_too_small.rar.uu.
    - CVE-2020-9308

Date: 2020-02-20 19:19:15.299300+00:00
Changed-By: leo.barbosa at canonical.com (Leonidas S. Barbosa)
https://launchpad.net/ubuntu/+source/libarchive/3.4.0-1ubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.