This bug was fixed in the package apt - 1.6.12ubuntu0.2
--------------- apt (1.6.12ubuntu0.2) bionic-security; urgency=high
* SECURITY UPDATE: Integer overflow in parsing (LP: #1899193) - apt-pkg/contrib/arfile.cc: add extra checks. - apt-pkg/contrib/tarfile.cc: limit tar item sizes to 128 GiB - apt-pkg/deb/debfile.cc: limit control file sizes to 64 MiB - test/*: add tests. - CVE-2020-27350 * Additional hardening: - apt-pkg/contrib/tarfile.cc: Limit size of long names and links to 1 MiB
-- Julian Andres Klode <email address hidden> Mon, 07 Dec 2020 12:13:36 +0100
This bug was fixed in the package apt - 1.6.12ubuntu0.2
---------------
apt (1.6.12ubuntu0.2) bionic-security; urgency=high
* SECURITY UPDATE: Integer overflow in parsing (LP: #1899193) contrib/ arfile. cc: add extra checks. contrib/ tarfile. cc: limit tar item sizes to 128 GiB deb/debfile. cc: limit control file sizes to 64 MiB contrib/ tarfile. cc: Limit size of long names and links to 1 MiB
- apt-pkg/
- apt-pkg/
- apt-pkg/
- test/*: add tests.
- CVE-2020-27350
* Additional hardening:
- apt-pkg/
-- Julian Andres Klode <email address hidden> Mon, 07 Dec 2020 12:13:36 +0100