Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 501
Alerts This Week
Warning Icon 1 501

Ubuntu 18.04 LTS: 3703-1 Moderate: libarchive-zip-perl Information Exposure

ubuntu
Calendar Grey July 4, 2018
Dist Ubuntu Esm H88
Compression Tool exploit flaw in Ubuntu may leak confidential data through malicious input; patch advised.
Archive Zip module could be made to expose sensitive information if it received a specially crafted input.

Summary

Archive Zip module could be made to expose sensitive information

if it received a specially crafted input.

Software Description:

- libarchive-zip-perl: Perl module for manipulation of ZIP archives

Details:

It was discovered that the Archive Zip module incorrectly handled

certain inputs. An attacker could possibly use this to access sensitive

information.

Topics%20covered

Topics Covered

security advisory moderate software update information exposure ubuntu libarchive-zip-perl

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS:
  libarchive-zip-perl             1.60-1ubuntu0.1

Ubuntu 17.10:
  libarchive-zip-perl             1.59-1ubuntu0.1

Ubuntu 16.04 LTS:
  libarchive-zip-perl             1.56-2ubuntu0.1

Ubuntu 14.04 LTS:
  libarchive-zip-perl             1.30-7ubuntu0.1

In general, a standard system update will make all the necessary
changes.

References

  https://ubuntu.com/security/notices/USN-3703-1

  CVE-2018-10860

Severity
important
Lowest
Low
Medium
High
Critical

July 04, 2018

Topics%20covered

Topics Covered

security advisory moderate software update information exposure ubuntu libarchive-zip-perl

Package Information

  https://launchpad.net/ubuntu/+source/libarchive-zip-perl/1.60-1ubuntu0.1
  https://launchpad.net/ubuntu/+source/libarchive-zip-perl/1.59-1ubuntu0.1
  https://launchpad.net/ubuntu/+source/libarchive-zip-perl/1.56-2ubuntu0.1
  https://launchpad.net/ubuntu/+source/libarchive-zip-perl/1.30-7ubuntu0.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.