[ubuntu/xenial-updates] apt 1.2.32ubuntu0.2 (Accepted)
Ubuntu Archive Robot
cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk
Wed Dec 9 16:58:22 UTC 2020
apt (1.2.32ubuntu0.2) xenial-security; urgency=high
* SECURITY UPDATE: Integer overflow in parsing (LP: #1899193)
- apt-pkg/contrib/arfile.cc: add extra checks.
- apt-pkg/contrib/tarfile.cc: limit tar item sizes to 128 GiB
- apt-pkg/deb/debfile.cc: limit control file sizes to 64 MiB
- test/*: add tests.
- CVE-2020-27350
* Additional hardening:
- apt-pkg/contrib/tarfile.cc: Limit size of long names and links to 1 MiB
Date: 2020-12-07 14:38:13.768513+00:00
Changed-By: Julian Andres Klode <julian.klode at canonical.com>
Signed-By: Ubuntu Archive Robot <cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk>
https://launchpad.net/ubuntu/+source/apt/1.2.32ubuntu0.2
-------------- next part --------------
Sorry, changesfile not available.
More information about the Xenial-changes
mailing list