USN-5171-1: Long Range ZIP vulnerabilities

Releases

• Ubuntu 18.04 ESM

Packages

• lrzip - compression program with a very high compression ratio

Details

It was discovered that Long Range ZIP incorrectly handled certain
specially crafted lrz files. A remote attacker could possibly use this
issue to cause a denial of service (crash) or other unspecified impact.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 18.04

• lrzip - 0.631-1+deb9u1build0.18.04.1

In general, a standard system update will make all the necessary changes.

References

• CVE-2018-5747
• CVE-2017-8846
• CVE-2018-10685
• CVE-2017-9929
• CVE-2017-9928
• CVE-2018-11496
• CVE-2017-8844
• CVE-2018-5650
• CVE-2018-5786
• CVE-2018-9058

Related notices

• USN-5171-2: lrzip
• USN-5840-1: lrzip