portage-ng / portage / app-arch / lrzip / 0.7.3
portage-ng glsa
1 advisory reference app-arch/lrzip · 1 places version 0.7.3 in a vulnerable range
▸ GLSA 202005-01 Long Range ZIP: Multiple vulnerabilities affects this version low local, remote 2020-05-12

Multiple vulnerabilities have been found in Long Range ZIP, the worst of which could result in a Denial of Service condition.

Announced
2020-05-12
Revised
2020-05-12
Access
local, remote
Bugs
#617930 #624462
Advisory
https://security.gentoo.org/glsa/202005-01

Affected packages

PackageArchVulnerableUnaffected
app-arch/lrzip*< 0.631_p20190619>= 0.631_p20190619

Background

Optimized for compressing large files

Description

Multiple vulnerabilities have been discovered in Long Range ZIP. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could entice a user to open a specially crafted archive file possibly resulting in a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All Long Range ZIP users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-arch/lrzip-0.631_p20190619"

References