CVE-2016-1000349

CVE-2016-10209 affects libarchive (archive_wstring_append_from_mbs) with a NULL pointer dereference that can crash the application via specially crafted archives (DoS). Multiple advisories cite this issue within libarchive versions around 3.x. Debian DSA-4360-1 fixes the flaw in stretch, upgradin...