diff options
author | Salvatore Bonaccorso <carnil@debian.org> | 2020-05-14 06:16:54 +0200 |
---|---|---|
committer | Salvatore Bonaccorso <carnil@debian.org> | 2020-05-14 06:16:54 +0200 |
commit | 7a3c55cca4998748cc3fecf815532f255dce1769 (patch) | |
tree | 1c5d40d98b3683080e0b167554a9c0ca44bb10d1 /english | |
parent | be4ad6f8cf067548661aef201a9482fc89417959 (diff) |
[DSA 4685-1] apt security update
Diffstat (limited to 'english')
-rw-r--r-- | english/security/2020/dsa-4685.data | 13 | ||||
-rw-r--r-- | english/security/2020/dsa-4685.wml | 22 |
2 files changed, 35 insertions, 0 deletions
diff --git a/english/security/2020/dsa-4685.data b/english/security/2020/dsa-4685.data new file mode 100644 index 00000000000..96d2900cfc2 --- /dev/null +++ b/english/security/2020/dsa-4685.data @@ -0,0 +1,13 @@ +<define-tag pagetitle>DSA-4685-1 apt</define-tag> +<define-tag report_date>2020-5-14</define-tag> +<define-tag secrefs>CVE-2020-3810</define-tag> +<define-tag packages>apt</define-tag> +<define-tag isvulnerable>yes</define-tag> +<define-tag fixed>yes</define-tag> +<define-tag fixed-section>no</define-tag> + +#use wml::debian::security + + + +</dl> diff --git a/english/security/2020/dsa-4685.wml b/english/security/2020/dsa-4685.wml new file mode 100644 index 00000000000..7a1ffdd312a --- /dev/null +++ b/english/security/2020/dsa-4685.wml @@ -0,0 +1,22 @@ +<define-tag description>security update</define-tag> +<define-tag moreinfo> +<p>Shuaibing Lu discovered that missing input validation in the ar/tar +implementations of APT, the high level package manager, could result in +denial of service when processing specially crafted deb files.</p> + +<p>For the oldstable distribution (stretch), this problem has been fixed +in version 1.4.10.</p> + +<p>For the stable distribution (buster), this problem has been fixed in +version 1.8.2.1.</p> + +<p>We recommend that you upgrade your apt packages.</p> + +<p>For the detailed security status of apt please refer to its security +tracker page at: +<a href="https://security-tracker.debian.org/tracker/apt">https://security-tracker.debian.org/tracker/apt</a></p> +</define-tag> + +# do not modify the following line +#include "$(ENGLISHDIR)/security/2020/dsa-4685.data" +# $Id: $ |