Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

Ubuntu 18.04 LTS: USN-3859-1 Moderate: Libarchive DoS Risks

ubuntu
Calendar Grey January 15, 2019
Dist Ubuntu Esm H88
=========================================================================Ubuntu Security Notice USN-
Several security issues were fixed in libarchive.

Summary

Several security issues were fixed in libarchive.

Software Description:

- libarchive: Library to read/write archive files

Details:

It was discovered that libarchive incorrectly handled certain archive

files. An attacker could possibly use this issue to cause a denial of

service. CVE-2018-1000880 affected only Ubuntu 18.04 and Ubuntu 18.10

LTS. (CVE-2018-1000877, CVE-2018-1000878, CVE-2018-1000880)

It was discovered that libarchive incorrectly handled certain archive

files. An attacker could possibly use this issue to expose sensitive

information. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04

LTS and Ubuntu 18.04 LTS. (CVE-2017-14502)

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu libarchive sensitive exposure January 2019 Ubuntu update

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.10:
  libarchive13                    3.2.2-5ubuntu0.1

Ubuntu 18.04 LTS:
  libarchive13                    3.2.2-3.1ubuntu0.2

Ubuntu 16.04 LTS:
  libarchive13                    3.1.2-11ubuntu0.16.04.5

Ubuntu 14.04 LTS:
  libarchive13                    3.1.2-7ubuntu2.7

In general, a standard system update will make all the necessary
changes.

References

  https://ubuntu.com/security/notices/USN-3859-1

  CVE-2017-14502, CVE-2018-1000877, CVE-2018-1000878, CVE-2018-1000880

January 15, 2019

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu libarchive sensitive exposure January 2019 Ubuntu update

Package Information

  https://launchpad.net/ubuntu/+source/libarchive/3.2.2-5ubuntu0.1
  https://launchpad.net/ubuntu/+source/libarchive/3.2.2-3.1ubuntu0.2
  https://launchpad.net/ubuntu/+source/libarchive/3.1.2-11ubuntu0.16.04.5
  https://launchpad.net/ubuntu/+source/libarchive/3.1.2-7ubuntu2.7

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here