Debian Security Advisory

DLA-570-1 kde4libs -- LTS security update

Date Reported:
30 Jul 2016
Affected Packages:
Security database references:
In the Debian bugtracking system: Bug 832620.
In Mitre's CVE dictionary: CVE-2016-6232.
More information:

It was possible to trick kde4libs's KArchiveDirectory::copyTo() function to extract files to arbitrary system locations from a specially prepared tar file outside of the extraction folder.

For Debian 7 Wheezy, these problems have been fixed in version 4:4.8.4-4+deb7u2.

We recommend that you upgrade your kde4libs packages.

Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: