ELA-344-1 apt security update

multiple integer overflows and underflows

Related CVEs CVE-2020-27350

It was discovered that missing input validation in the ar/tar implementations of APT, the high level package manager, could cause out-of-bounds reads or infinite loops, resulting in denial of service when processing malformed deb files.

For Debian 8 jessie, these problems have been fixed in version

We recommend that you upgrade your apt packages.

Further information about Extended LTS security advisories can be found in the dedicated section of our website.