xar vulnerabilities (Debian)

4 vulnerabilities.

• xar Debian libxar.so in xar 1.6.1 has a NULL pointer dereference in the xar_get_path function in util.c. CVE-2017-11125 Fix available 9.8 CriticalJuly 10, 2017
• xar Debian libxar.so in xar 1.6.1 has a NULL pointer dereference in the xar_unserialize function in archive.c. CVE-2017-11124 Fix available 9.8 CriticalJuly 10, 2017
• xar Debian Heap-based buffer overflow in xar in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers... CVE-2010-3798 Fix available 6.8 MediumNovember 16, 2010
• xar Debian xar in Apple Mac OS X 10.5.8 does not properly validate package signatures, which allows... CVE-2010-0055 Fix available 10.0 HighMarch 30, 2010