Bug 27728

Summary:	[Update Request] apt CVE-2020-3810
Product:	Mageia	Reporter:	Zombie Ryushu <zombie_ryushu>
Component:	Security	Assignee:	Mageia Bug Squad <bugsquad>
Status:	RESOLVED DUPLICATE	QA Contact:	Sec team <security>
Severity:	normal
Priority:	Normal
Version:	7
Target Milestone:	---
Hardware:	All
OS:	Linux
URL:	https://repology.org/project/apt/cves?version=0.5.15lorg3.94
Whiteboard:
Source RPM:	apt	CVE:	CVE-2020-3810
Status comment:

Description Zombie Ryushu 2020-12-04 01:50:10 CET

Missing input validation in the ar/tar implementations of APT before version 2.1.2 could result in denial of service when processing specially crafted deb files.

Comment 1 Zombie Ryushu 2020-12-04 01:50:58 CET

In the context of Mageia, this probably applies to the use of the Alien utilities to convert Closed Source Debs to RPMs.

CVE: (none) => CVE-2020-3810

Comment 2 David Walser 2020-12-04 02:56:53 CET

Already reported, and INVALID.

*** This bug has been marked as a duplicate of bug 26621 ***

Resolution: (none) => DUPLICATE
Status: NEW => RESOLVED