Debian Security Advisory

DLA-1971-1 libarchive -- LTS security update

Date Reported:
26 Oct 2019
Affected Packages:
Security database references:
In Mitre's CVE dictionary: CVE-2019-18408.
More information:

An issue has been found in libarchive, a multi-format archive and compression library.

In case of a crafted archive containing several parts and one part being corrupt, there would be an use-after-free for the next part of the archive.

For Debian 8 Jessie, this problem has been fixed in version 3.1.2-11+deb8u8.

We recommend that you upgrade your libarchive packages.

Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: