USN-5356-1: DOSBox vulnerabilities

Releases

• Ubuntu 18.04 ESM

Packages

• dosbox - An Open Source DOS emulator to run old DOS games.

Details

Alexandre Bartel discovered that DOSBox incorrectly handled
long lines in certain files. An attacker could possibly use
this issue to execute arbitrary code. (CVE-2019-7165)

Alexandre Bartel discovered that DOSBox incorrectly performed
access control over certain directories. An attacker could
possibly use this issue to execute arbitrary code.
(CVE-2019-12594)

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 18.04

• dosbox - 0.74-4.3ubuntu0.1

In general, a standard system update will make all the necessary changes.

References

• CVE-2019-12594
• CVE-2019-7165