Publishing details

• Removed from disk on 2018-01-23.
• Removal requested on 2018-01-23.
• Published on 2017-03-09
• Copied from ubuntu yakkety in Private PPA for Ubuntu Security Team by Ubuntu Archive Robot

Changelog

libarchive (3.2.1-2ubuntu0.1) yakkety-security; urgency=medium

  * SECURITY UPDATE: arbitrary file write via hardlink entries
    - debian/patches/CVE-2016-5418-1.patch: enforce sandbox with very long
      pathnames in libarchive/archive_write_disk_posix.c.
    - debian/patches/CVE-2016-5418-2.patch: fix path handling in
      libarchive/archive_write_disk_posix.c.
    - debian/patches/CVE-2016-5418-3.patch: add test cases to Makefile.am,
      libarchive/test/CMakeLists.txt, libarchive/test/main.c,
      libarchive/test/test.h, libarchive/test/test_write_disk_secure744.c,
      libarchive/test/test_write_disk_secure745.c,
      libarchive/test/test_write_disk_secure746.c.
    - debian/patches/CVE-2016-5418-4.patch: fix testcases in
      libarchive/test/test_write_disk_secure745.c,
      libarchive/test/test_write_disk_secure746.c.
    - debian/patches/CVE-2016-5418-5.patch: correct PATH_MAX usage in
      libarchive/archive_write_disk_posix.c.
    - CVE-2016-5418
  * SECURITY UPDATE: denial of service via non-printable multibyte
    character in a filename
    - debian/patches/CVE-2016-8687.patch: expand buffer size in tar/util.c.
    - CVE-2016-8687
  * SECURITY UPDATE: denial of service via multiple long lines
    - debian/patches/CVE-2016-8688.patch: fix bounds in
      libarchive/archive_read_support_format_mtree.c, added test to
      Makefile.am, libarchive/test/CMakeLists.txt,
      libarchive/test/test_read_format_mtree_crash747.c,
      libarchive/test/test_read_format_mtree_crash747.mtree.bz2.uu.
    - CVE-2016-8688
  * SECURITY UPDATE: denial of service via multiple EmptyStream attributes
    - debian/patches/CVE-2016-8689.patch: reject files with multiple
      markers in libarchive/archive_read_support_format_7zip.c.
    - CVE-2016-8689
  * SECURITY UPDATE: denial of service via invalid compressed file size
    - debian/patches/CVE-2017-5601.patch: add check to
      libarchive/archive_read_support_format_lha.c.
    - CVE-2017-5601

 -- Marc Deslauriers <email address hidden>  Thu, 09 Mar 2017 10:35:20 -0500

Builds

• amd64
• arm64
• armhf
• i386
• powerpc
• ppc64el
• s390x

Package files

• bsdcpio_3.2.1-2ubuntu0.1_all.deb (4.1 KiB)
• bsdtar_3.2.1-2ubuntu0.1_all.deb (4.1 KiB)
• libarchive-dev_3.2.1-2ubuntu0.1_amd64.deb (454.6 KiB)
• libarchive-dev_3.2.1-2ubuntu0.1_arm64.deb (415.9 KiB)
• libarchive-dev_3.2.1-2ubuntu0.1_armhf.deb (428.6 KiB)
• libarchive-dev_3.2.1-2ubuntu0.1_i386.deb (501.8 KiB)
• libarchive-dev_3.2.1-2ubuntu0.1_powerpc.deb (428.5 KiB)
• libarchive-dev_3.2.1-2ubuntu0.1_ppc64el.deb (492.5 KiB)
• libarchive-dev_3.2.1-2ubuntu0.1_s390x.deb (442.8 KiB)
• libarchive-tools-dbgsym_3.2.1-2ubuntu0.1_amd64.ddeb (66.7 KiB)
• libarchive-tools-dbgsym_3.2.1-2ubuntu0.1_arm64.ddeb (67.6 KiB)
• libarchive-tools-dbgsym_3.2.1-2ubuntu0.1_armhf.ddeb (66.1 KiB)
• libarchive-tools-dbgsym_3.2.1-2ubuntu0.1_i386.ddeb (61.4 KiB)
• libarchive-tools-dbgsym_3.2.1-2ubuntu0.1_powerpc.ddeb (66.6 KiB)
• libarchive-tools-dbgsym_3.2.1-2ubuntu0.1_ppc64el.ddeb (72.1 KiB)
• libarchive-tools-dbgsym_3.2.1-2ubuntu0.1_s390x.ddeb (64.3 KiB)
• libarchive-tools_3.2.1-2ubuntu0.1_amd64.deb (66.7 KiB)
• libarchive-tools_3.2.1-2ubuntu0.1_arm64.deb (63.3 KiB)
• libarchive-tools_3.2.1-2ubuntu0.1_armhf.deb (64.0 KiB)
• libarchive-tools_3.2.1-2ubuntu0.1_i386.deb (71.0 KiB)
• libarchive-tools_3.2.1-2ubuntu0.1_powerpc.deb (67.0 KiB)
• libarchive-tools_3.2.1-2ubuntu0.1_ppc64el.deb (66.5 KiB)
• libarchive-tools_3.2.1-2ubuntu0.1_s390x.deb (66.3 KiB)
• libarchive13-dbgsym_3.2.1-2ubuntu0.1_amd64.ddeb (615.9 KiB)
• libarchive13-dbgsym_3.2.1-2ubuntu0.1_arm64.ddeb (615.9 KiB)
• libarchive13-dbgsym_3.2.1-2ubuntu0.1_armhf.ddeb (605.7 KiB)
• libarchive13-dbgsym_3.2.1-2ubuntu0.1_i386.ddeb (564.9 KiB)
• libarchive13-dbgsym_3.2.1-2ubuntu0.1_powerpc.ddeb (597.1 KiB)
• libarchive13-dbgsym_3.2.1-2ubuntu0.1_ppc64el.ddeb (723.1 KiB)
• libarchive13-dbgsym_3.2.1-2ubuntu0.1_s390x.ddeb (594.8 KiB)
• libarchive13_3.2.1-2ubuntu0.1_amd64.deb (278.7 KiB)
• libarchive13_3.2.1-2ubuntu0.1_arm64.deb (232.5 KiB)
• libarchive13_3.2.1-2ubuntu0.1_armhf.deb (245.4 KiB)
• libarchive13_3.2.1-2ubuntu0.1_i386.deb (318.2 KiB)
• libarchive13_3.2.1-2ubuntu0.1_powerpc.deb (261.6 KiB)
• libarchive13_3.2.1-2ubuntu0.1_ppc64el.deb (301.9 KiB)
• libarchive13_3.2.1-2ubuntu0.1_s390x.deb (262.0 KiB)
• libarchive_3.2.1-2ubuntu0.1.debian.tar.xz (24.6 KiB)
• libarchive_3.2.1-2ubuntu0.1.dsc (2.5 KiB)
• libarchive_3.2.1.orig.tar.gz (5.2 MiB)