==========================================================================
Ubuntu Security Notice USN-4066-1
July 18, 2019

libmspack vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 18.04 LTS
– Ubuntu 16.04 LTS

Summary:

libmspack could be made to expose sensitive information if it received
a specially crafted CHM file.

Software Description:
– libmspack: library for Microsoft compression formats

Details:

It was discovered that libmspack incorrectly handled certain CHM files.
A remote attacker could possibly use this issue to access sensitive information.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS:
libmspack0 0.6-3ubuntu0.3

Ubuntu 16.04 LTS:
libmspack0 0.5-1ubuntu0.16.04.4

In general, a standard system update will make all the necessary changes.

References:
https://usn.ubuntu.com/4066-1
CVE-2019-1010305

Package Information:
https://launchpad.net/ubuntu/+source/libmspack/0.6-3ubuntu0.3
https://launchpad.net/ubuntu/+source/libmspack/0.5-1ubuntu0.16.04.4
—–BEGIN PGP SIGNATURE—–
Version: GnuPG v1
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=9OCz
—–END PGP SIGNATURE—–
—