[3.7] cabextract: Buffer overflow (CVE-2018-18584)
cabextract before 1.8, the CAB block input buffer is one byte too small
for the maximal Quantum block,
leading to an out-of-bounds write.
Fixed In Version:
cabextract 1.8
References:
https://www.cabextract.org.uk
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18584
https://www.openwall.com/lists/oss-security/2018/10/22/1
(from redmine: issue id 9670, created on 2018-11-21, closed on 2018-11-28)
- Relations:
- parent #9667 (closed)
- Changesets:
- Revision 754798d2 by Natanael Copa on 2018-11-27T15:46:50Z:
main/cabextract: security upgrade to 1.9 (CVE-2018-18584)
fixes #9670
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information