Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 501
Alerts This Week
Warning Icon 1 501

Ubuntu 12.04 ESM: USN-3703-2 Critical: Archive Zip Information Exposure

ubuntu
Calendar Grey July 4, 2018
Dist Ubuntu Esm H88
Ubuntu 12.04 ESM administrators are advised to upgrade libarchive-zip-perl to address the risk of sensitive data leakage stemming from specially crafted input.
Archive Zip module could be made to expose sensitive information if it received a specially crafted input.

Summary

Archive Zip module could be made to expose sensitive information

if it received a specially crafted input.

Software Description:

- libarchive-zip-perl: Perl module for manipulation of ZIP archives

Details:

USN-3703-1 fixed a vulnerability in Archive Zip module. This update

provides the corresponding update for Ubuntu 12.04 ESM.

Original advisory details:

 It was discovered that the Archive Zip module incorrectly handled

certain inputs.

 An attacker could possibly use this to access sensitive information.

Topics%20covered

Topics Covered

security advisory update information exposure ubuntu libarchive

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 ESM:
  libarchive-zip-perl             1.30-6ubuntu0.1

In general, a standard system update will make all the necessary
changes.

References

  https://ubuntu.com/security/notices/USN-3703-2

  https://ubuntu.com/security/notices/USN-3703-1

  CVE-2018-10860

Severity
critical
Lowest
Low
Medium
High
Critical

July 04, 2018

Topics%20covered

Topics Covered

security advisory update information exposure ubuntu libarchive

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.