[slackware-security] lrzip

New lrzip packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/lrzip-0.660-i586-1slack15.0.txz: Upgraded. Address multiple potential security issues with crafted or corrupt archives. Security fix...

FreeBSD : libarchive -- Infinite loop in corrupt archives handling in libarchive (792bc222-c5d7-11db-9f82-000e0c2e438a)

If the end of an archive is reached while attempting to 'skip' past a region of an archive, libarchive will enter an infinite loop wherein it repeatedly attempts and fails to read further data. Impact : An attacker able to cause a system to extract via 'tar -x' or another application which uses...

libarchive -- Infinite loop in corrupt archives handling in libarchive

Problem Description: If the end of an archive is reached while attempting to "skip" past a region of an archive, libarchive will enter an infinite loop wherein it repeatedly attempts and fails to read further data. Impact: An attacker able to cause a system to extract via "tar -x" or another...