[ubuntu/natty-security] libarchive 2.8.4-1ubuntu0.11.04.1 (Accepted)

[Marc Deslauriers]

libarchive (2.8.4-1ubuntu0.11.04.1) natty-security; urgency=low

  * SECURITY UPDATE: arbitrary code execution via iso9660 overflows
    - debian/patches/CVE-2011-1777.patch: correctly fail on out of memory
      conditions in libarchive/archive_read_support_format_iso9660.c.
    - CVE-2011-1777
  * SECURITY UPDATE: arbitrary code execution via tar overflows
    - debian/patches/CVE-2011-1778.patch: correctly fail on out of memory
      conditions in libarchive/archive_read_support_format_tar.c
    - CVE-2011-1778

Date: Fri, 09 Dec 2011 15:22:52 -0500
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/natty/+source/libarchive/2.8.4-1ubuntu0.11.04.1
-------------- next part --------------
Format: 1.8
Date: Fri, 09 Dec 2011 15:22:52 -0500
Source: libarchive
Binary: libarchive-dev libarchive1 bsdtar bsdcpio
Architecture: source
Version: 2.8.4-1ubuntu0.11.04.1
Distribution: natty-security
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description: 
 bsdcpio    - cpio(1) from FreeBSD, using libarchive
 bsdtar     - tar(1) from FreeBSD, using libarchive
 libarchive-dev - Single library to read/write tar, cpio, pax, zip, iso9660, etc.
 libarchive1 - Single library to read/write tar, cpio, pax, zip, iso9660, etc.
Changes: 
 libarchive (2.8.4-1ubuntu0.11.04.1) natty-security; urgency=low
 .
   * SECURITY UPDATE: arbitrary code execution via iso9660 overflows
     - debian/patches/CVE-2011-1777.patch: correctly fail on out of memory
       conditions in libarchive/archive_read_support_format_iso9660.c.
     - CVE-2011-1777
   * SECURITY UPDATE: arbitrary code execution via tar overflows
     - debian/patches/CVE-2011-1778.patch: correctly fail on out of memory
       conditions in libarchive/archive_read_support_format_tar.c
     - CVE-2011-1778
Checksums-Sha1: 
 5bb47adaec412d5951d8d71b628fd0f8030e92a1 2131 libarchive_2.8.4-1ubuntu0.11.04.1.dsc
 7a4b596ad52eed399eefb7c37a10268e81cea67d 16088 libarchive_2.8.4-1ubuntu0.11.04.1.debian.tar.gz
Checksums-Sha256: 
 06676c38c23f63b72515d663d221a44c408ad064fbb989e4a9943f7fe7d30265 2131 libarchive_2.8.4-1ubuntu0.11.04.1.dsc
 cfea100b7884121a969a54491ee83d15613ef1653deb328263bce4099476e20f 16088 libarchive_2.8.4-1ubuntu0.11.04.1.debian.tar.gz
Files: 
 5fab822cad76e1c3f67a3f66d77c08db 2131 libs optional libarchive_2.8.4-1ubuntu0.11.04.1.dsc
 dda035c0e08810638dcc0388964a3c90 16088 libs optional libarchive_2.8.4-1ubuntu0.11.04.1.debian.tar.gz
Original-Maintainer: Andreas Henriksson <andreas at fatal.se>