Ubuntu Security Notice 4073-1 - It was discovered that libEBML incorrectly handled certain media files. If a user were tricked into opening a specially crafted media file, libEBML could possibly be made to crash, resulting in a denial of service.
01ea518490e9ca54bcdc4a67a0d42b41cdd557600790f8bdd7f0c9b3fd2c5984
==========================================================================
Ubuntu Security Notice USN-4073-1
July 25, 2019
libebml vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS
Summary:
libEBML could be made to crash if it opened a specially crafted file.
Software Description:
- libebml: library for the EBML format
Details:
It was discovered that libEBML incorrectly handled certain media files. If
a user were tricked into opening a specially crafted media file, libEBML
could possibly be made to crash, resulting in a denial of service.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 18.04 LTS:
libebml4v5 1.3.5-2ubuntu0.1
Ubuntu 16.04 LTS:
libebml4v5 1.3.3-1ubuntu0.1
In general, a standard system update will make all the necessary changes.
References:
https://usn.ubuntu.com/4073-1
CVE-2019-13615
Package Information:
https://launchpad.net/ubuntu/+source/libebml/1.3.5-2ubuntu0.1
https://launchpad.net/ubuntu/+source/libebml/1.3.3-1ubuntu0.1