=========================================================================Ubuntu Security Notice USN-4073-1
July 25, 2019

libebml vulnerability
=========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS

Summary:

libEBML could be made to crash if it opened a specially crafted file.

Software Description:
- libebml: library for the EBML format

Details:

It was discovered that libEBML incorrectly handled certain media files. If
a user were tricked into opening a specially crafted media file, libEBML
could possibly be made to crash, resulting in a denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS:
  libebml4v5                      1.3.5-2ubuntu0.1

Ubuntu 16.04 LTS:
  libebml4v5                      1.3.3-1ubuntu0.1

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-4073-1
  CVE-2019-13615

Package Information:
  https://launchpad.net/ubuntu/+source/libebml/1.3.5-2ubuntu0.1
  https://launchpad.net/ubuntu/+source/libebml/1.3.3-1ubuntu0.1

Ubuntu 4073-1: libEBML vulnerability

July 25, 2019
libEBML could be made to crash if it opened a specially crafted file.

Summary

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 18.04 LTS: libebml4v5 1.3.5-2ubuntu0.1 Ubuntu 16.04 LTS: libebml4v5 1.3.3-1ubuntu0.1 In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4073-1

CVE-2019-13615

Severity
July 25, 2019

Package Information

https://launchpad.net/ubuntu/+source/libebml/1.3.5-2ubuntu0.1 https://launchpad.net/ubuntu/+source/libebml/1.3.3-1ubuntu0.1

Related News