Debian Security Advisory
DLA-1971-1 libarchive -- LTS security update
- Date Reported:
- 26 Oct 2019
- Affected Packages:
- libarchive
- Vulnerable:
- Yes
- Security database references:
- In Mitre's CVE dictionary: CVE-2019-18408.
- More information:
-
An issue has been found in libarchive, a multi-format archive and compression library.
In case of a crafted archive containing several parts and one part being corrupt, there would be an use-after-free for the next part of the archive.
For Debian 8
Jessie
, this problem has been fixed in version 3.1.2-11+deb8u8.We recommend that you upgrade your libarchive packages.
Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS