• [SECURITY] [DSA 4160-1] libevt security update

    From Moritz Muehlenhoff@1:229/2 to All on Sun Apr 1 15:00:01 2018
    From: [email protected]

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-4160-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff
    April 01, 2018 https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : libevt
    CVE ID : CVE-2018-8754

    It was discovered that insufficient input sanitising in libevt, a library
    to access the Windows Event Log (EVT) format, could result in denial of
    service or the execution of arbitrary code if a malformed EVT file is processed.

    For the stable distribution (stretch), this problem has been fixed in
    version 20170120-1+deb9u1.

    We recommend that you upgrade your libevt packages.

    For the detailed security status of libevt please refer to
    its security tracker page at: https://security-tracker.debian.org/tracker/libevt

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: [email protected]
    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAlrA1d4ACgkQEMKTtsN8 TjbpMg/+Kd6gI+FUez9dCz9KZd5rzuMwcv8valLGN2h7Tnd4CV1Yd5qrH9EtSCNy kK3xN9tWJ9Fdrvh+8GDBV/6MHFiirwAK58lwGUBp475/tzWRh0hlKwuJ2gqikMO2 lups7qqpoEzJtpi6H5otQdeuWgvbpZ1MlItMy3UqQaVxfK2ehjZO3Nq0uv+DkZ4W dSbfu3XS9H3Qz5Y1wQJfwjkqKbfKtXxSJNVxvWlE8v34i5rSpn1iboKfyBjeNQ6m pLC/l15N5t7V2MNbkNht0XeRci9KCn2TXD7vYPjAbckCCy7bS/CladXFnDCwohoT qyHbrvgSwT1Bm7xA5LK3YfvfLDOyERaAxNjDTiBrh00b5WzOklPfOmbfEgqNBSl4 trwV6mOkuyb2JrakOFKdxQqocb0YKqfxb11K5LTcGq/jJKpq3V/XO4OSgH8chNcW 2MOPY4JtbUAT90Zx5HdX0k/xYbi8J/qflra0wI6cqum86mn2uPhWUYzXBfMH2U/y k9MduKTrVkJQjggarMutJfUMpSaisyBNhxuZkDLajYuJ11wUCGJcqNrYCpFjKBAf FF5FQ9pqmJAoZegTSO9+7kNp1O1fCZIV2jMpwm1ea7RB5hLLmtK/vUjot0qAjbFv kTlDvwX6SsatVn+BNCIIaN1FB20NTakFLZJvsY9+eCYGDp6o+ds=
    =ZoaG
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)