[SECURITY] [DLA 250-1] libclamunrar security update

2015-06-1920:17:21

lists.debian.org

AI Score

7.2

Confidence

Low

JSON

Package : libclamunrar
Version : 0.98.5-0+deb6u1
Debian Bug : 770647

Upstream published version 0.98.5. This update updates sqeeze-lts to the
latest upstream release in line with the approach used for other Debian
releases.

This update corrects a double-free error that existed within the
"unrar_extract_next_prepare()" function (libclamunrar_iface/unrar_iface.c)
when parsing a RAR file. While no CVE was assigned, this issue does have
potential security implications.

If you use libclamunrar, we strongly recommend that you upgrade to this
version.

OSVersionArchitecturePackageVersionFilename
Debian6amd64libclamunrar6< 0.98.5-0+deb6u1libclamunrar6_0.98.5-0+deb6u1_amd64.deb
Debian6alllibclamunrar< 0.98.5-0+deb6u1libclamunrar_0.98.5-0+deb6u1_all.deb
Debian6i386libclamunrar6< 0.98.5-0+deb6u1libclamunrar6_0.98.5-0+deb6u1_i386.deb

OS	Version	Architecture	Package	Version	Filename
Debian	6	amd64	libclamunrar6	< 0.98.5-0+deb6u1	libclamunrar6_0.98.5-0+deb6u1_amd64.deb
Debian	6	all	libclamunrar	< 0.98.5-0+deb6u1	libclamunrar_0.98.5-0+deb6u1_all.deb
Debian	6	i386	libclamunrar6	< 0.98.5-0+deb6u1	libclamunrar6_0.98.5-0+deb6u1_i386.deb

AI Score

7.2

Confidence

Low

JSON