Описание
Security update for rzip
This update for rzip fixes the following issues:
- CVE-2017-8364: heap-based buffer overflow in read_buf function via crafted archive file could lead to crash (boo#1036941)
Список пакетов
openSUSE Leap 42.1
rzip-2.1-151.3.1
openSUSE Leap 42.2
rzip-2.1-151.3.1
Ссылки
- E-Mail link for openSUSE-SU-2017:1275-1
- SUSE Security Ratings
Описание
The read_buf function in stream.c in rzip 2.1 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted archive.
Затронутые продукты
openSUSE Leap 42.1:rzip-2.1-151.3.1
openSUSE Leap 42.2:rzip-2.1-151.3.1
Ссылки
- CVE-2017-8364
- SUSE Bug 1036941