Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:1507-1

Опубликовано: 05 июн. 2018
Источник: suse-cvrf

Описание

Security update for zziplib

This update for zziplib fixes the following issues:

Security issue fixed:

  • CVE-2018-6542: Reject file if the size of the central directory is too big and display an error message (bsc#1079094).

Список пакетов

SUSE Linux Enterprise Desktop 12 SP3
libzzip-0-13-0.13.67-10.11.1
SUSE Linux Enterprise Software Development Kit 12 SP3
libzzip-0-13-0.13.67-10.11.1
zziplib-devel-0.13.67-10.11.1
SUSE Linux Enterprise Workstation Extension 12 SP3
libzzip-0-13-0.13.67-10.11.1

Ссылки

Описание

In ZZIPlib 0.13.67, there is a bus error (when handling a disk64_trailer seek value) caused by loading of a misaligned address in the zzip_disk_findfirst function of zzip/mmapped.c.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP3:libzzip-0-13-0.13.67-10.11.1
SUSE Linux Enterprise Software Development Kit 12 SP3:libzzip-0-13-0.13.67-10.11.1
SUSE Linux Enterprise Software Development Kit 12 SP3:zziplib-devel-0.13.67-10.11.1
SUSE Linux Enterprise Workstation Extension 12 SP3:libzzip-0-13-0.13.67-10.11.1
Ссылки