Debian alert DLA-955-1 (rzip)

From:
    	     
 
Emilio Pozuelo Monfort <pochu@debian.org> 
To:
    	     
 
debian-lts-announce@lists.debian.org 
Subject:
    	     
 
[SECURITY] [DLA 955-1] rzip security update 
Date:
    	     
 
Fri, 26 May 2017 19:35:01 +0200
Message-ID:
    	     
 
<57d158ad-de20-a8c3-c482-a4692f2bebe2@debian.org>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Package        : rzip
Version        : 2.1-1+deb7u1
CVE ID         : CVE-2017-8364
Debian Bug     : 861614

Agostino Sarubbo of Gentoo discovered a heap buffer overflow write
in the rzip program when uncompressing maliciously crafted files.

For Debian 7 "Wheezy", these problems have been fixed in version
2.1-1+deb7u1.

We recommend that you upgrade your rzip packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
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=maWH
-----END PGP SIGNATURE-----