[ GLSA 201903-20 ] cabextract, libmspack

[GLSA]

Gentoo Linux Security Advisory

Title: cabextract, libmspack: Multiple vulnerabilities (GLSA 201903-20)
Severity: normal
Exploitable: remote
Date: 2019-03-28
Bug(s): #662874, #669280
ID: 201903-20

Synopsis

Multiple vulnerabilities have been found in cabextract and
libmspack, the worst of which could result in a Denial of Service.


Background

cabextract is free software for extracting Microsoft cabinet files.libmspack is a portable library for some loosely related Microsoft
compression formats


Affected Packages

Package: app-arch/cabextract
Vulnerable: < 1.8
Unaffected: >= 1.8
Architectures: All supported architectures

Package: dev-libs/libmspack
Vulnerable: < 0.8_alpha
Unaffected: >= 0.8_alpha
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in cabextract and
libmspack. Please review the CVE identifiers referenced below for
details.


Impact

Please review the referenced CVE’s for details.

Workaround

There is no known workaround at this time.

Resolution

All cabextract users should upgrade to the latest version: