Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2019:2750-1

Опубликовано: 23 окт. 2019
Источник: suse-cvrf

Описание

Security update for zziplib

This update for zziplib fixes the following issues:

Security issue fixed:

  • CVE-2018-16548: Prevented memory leak from __zzip_parse_root_directory(). Free allocated structure if its address is not passed back. (bsc#1107424)

Other issue addressed:

  • Prevented a division by zero (bsc#1129403).

Список пакетов

SUSE Linux Enterprise Module for Basesystem 15
libzzip-0-13-0.13.69-3.10.1
zziplib-devel-0.13.69-3.10.1
SUSE Linux Enterprise Module for Basesystem 15 SP1
libzzip-0-13-0.13.69-3.10.1
zziplib-devel-0.13.69-3.10.1

Ссылки

Описание

An issue was discovered in ZZIPlib through 0.13.69. There is a memory leak triggered in the function __zzip_parse_root_directory in zip.c, which will lead to a denial of service attack.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP1:libzzip-0-13-0.13.69-3.10.1
SUSE Linux Enterprise Module for Basesystem 15 SP1:zziplib-devel-0.13.69-3.10.1
SUSE Linux Enterprise Module for Basesystem 15:libzzip-0-13-0.13.69-3.10.1
SUSE Linux Enterprise Module for Basesystem 15:zziplib-devel-0.13.69-3.10.1
Ссылки