Joined: 12 May 2004
|Posted: Tue Jul 28, 2020 4:26 pm Post subject: [ GLSA 202007-42 ] LHa
|Gentoo Linux Security Advisory
Title: LHa: Buffer overflow (GLSA 202007-42)
LHa has a buffer overflow in its compression utility with
LHa is a console-based program for packing and unpacking LHarc archives.
Vulnerable: < 114i_p20201004
Unaffected: >= 114i_p20201004
Architectures: All supported architectures
A buffer overflow in LHa’s compression code was discovered which can
be triggered by a crafted input file.
A remote attacker could send a specially crafted file possibly resulting
in a Denial of Service condition.
There is no known workaround at this time.
All LHa users should upgrade to the latest version:
|# emerge --sync
# emerge --ask --oneshot --verbose ">=app-arch/lha-114i_p20201004"