Debian Security Advisory
DLA-740-1 libgsf -- LTS security update
- Date Reported:
- 11 Dec 2016
- Affected Packages:
- libgsf
- Vulnerable:
- Yes
- Security database references:
- In Mitre's CVE dictionary: CVE-2016-9888.
- More information:
-
It was discovered that there was a null pointer deference exploit in libgsf, a I/O abstraction library for GNOME.
An error within the "tar_directory_for_file()" function could be exploited to trigger a null pointer dereference and subsequently cause a crash via a crafted TAR file.
For Debian 7
Wheezy
, this issue has been fixed in libgsf version 1.14.21-2.1+deb7u1.We recommend that you upgrade your libgsf packages.
