Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Ubuntu 15.10 & 14.04 LTS USN-2901-1 Moderate: xdelta3 Denial of Service

ubuntu
Calendar Grey February 17, 2016
Scroller Ubuntu
Ubuntu Security Advisory USN-2902-1 highlights a critical flaw in libcurl that could lead to potential data breaches or system unresponsiveness.
xdelta3 could be made to crash or run programs if it opened a specially crafted file.

Summary

xdelta3 could be made to crash or run programs if it opened a specially

crafted file.

Software Description:

- xdelta3: Diff utility which works with binary files

Details:

It was discovered that xdelta3 incorrectly handled certain files. If a user

or automated system were tricked into processing a specially-crafted file,

a remote attacker could use this issue to cause xdelta3 to crash, resulting

in a denial of service, or possibly execute arbitrary code.

Topics%20covered

Topics Covered

security advisory denial of service code execution Ubuntu xdelta3

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 15.10:
  xdelta3                         3.0.8-dfsg-1ubuntu0.15.10.2

Ubuntu 14.04 LTS:
  xdelta3                         3.0.7-dfsg-2ubuntu0.2

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2901-1

CVE-2014-9765

February 17, 2016

Topics%20covered

Topics Covered

security advisory denial of service code execution Ubuntu xdelta3

Package Information

https://launchpad.net/ubuntu/+source/xdelta3/3.0.8-dfsg-1ubuntu0.15.10.2
https://launchpad.net/ubuntu/+source/xdelta3/3.0.7-dfsg-2ubuntu0.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.