USN-5171-2: Long Range ZIP vulnerabilities

Releases

• Ubuntu 16.04 ESM
• Ubuntu 14.04 ESM

Packages

• lrzip - compression program with a very high compression ratio

Details

USN-5171-1 fixed vulnerabilities in Long Range ZIP.
This update provides the corresponding updates for Ubuntu 14.04 ESM and
Ubuntu 16.04 ESM.

Original advisory details:

It was discovered that Long Range ZIP incorrectly handled certain
specially crafted lrz files. A remote attacker could possibly use this
issue to cause a denial of service (crash) or other unspecified impact.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 16.04

• lrzip - 0.621-1ubuntu0.1~esm1
  Available with Ubuntu Pro

Ubuntu 14.04

• lrzip - 0.616-1ubuntu0.1~esm1
  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References

• CVE-2018-5747
• CVE-2017-8844
• CVE-2018-9058
• CVE-2018-11496
• CVE-2017-9929
• CVE-2017-8846
• CVE-2018-5650
• CVE-2017-9928
• CVE-2018-10685
• CVE-2018-5786

Related notices

• USN-5171-1
• USN-5840-1