[SECURITY] [DLA 1895-1] libmspack security update

2019-08-23T20:50:30
ID DEBIAN:DLA-1895-1:5ADC9
Type debian
Reporter Debian
Modified 2019-08-23T20:50:30

Description

Package : libmspack Version : 0.5-1+deb8u4 CVE ID : CVE-2019-1010305

JsHuang found an issue in libmspack, a library for Microsoft compression format. Opening a crafted chm file might result in a buffer overflow which might disclose confidential information.

For Debian 8 "Jessie", this problem has been fixed in version 0.5-1+deb8u4.

We recommend that you upgrade your libmspack packages.

Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS