1. Ubuntu Security Notices
  2. USN-2901-1

USN-2901-1: xdelta3 vulnerability

Publication date

17 February 2016

Overview

xdelta3 could be made to crash or run programs if it opened a specially crafted file.

Releases

Packages

  • xdelta3 - Diff utility which works with binary files

Details

It was discovered that xdelta3 incorrectly handled certain files. If a user
or automated system were tricked into processing a specially-crafted file,
a remote attacker could use this issue to cause xdelta3 to crash, resulting
in a denial of service, or possibly execute arbitrary code.

It was discovered that xdelta3 incorrectly handled certain files. If a user
or automated system were tricked into processing a specially-crafted file,
a remote attacker could use this issue to cause xdelta3 to crash, resulting
in a denial of service, or possibly execute arbitrary code.

Update instructions

In general, a standard system update will make all the necessary changes.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release Package Version
15.10 wily xdelta3 –  3.0.8-dfsg-1ubuntu0.15.10.2
14.04 trusty xdelta3 –  3.0.7-dfsg-2ubuntu0.2

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

Have additional questions?

Talk to a member of the team ›