=========================================================================Ubuntu Security Notice USN-4073-1
July 25, 2019
libebml vulnerability
=========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS
Summary:
libEBML could be made to crash if it opened a specially crafted file.
Software Description:
- libebml: library for the EBML format
Details:
It was discovered that libEBML incorrectly handled certain media files. If
a user were tricked into opening a specially crafted media file, libEBML
could possibly be made to crash, resulting in a denial of service.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 18.04 LTS:
libebml4v5 1.3.5-2ubuntu0.1
Ubuntu 16.04 LTS:
libebml4v5 1.3.3-1ubuntu0.1
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-4073-1
CVE-2019-13615
Package Information:
https://launchpad.net/ubuntu/+source/libebml/1.3.5-2ubuntu0.1
https://launchpad.net/ubuntu/+source/libebml/1.3.3-1ubuntu0.1