Описание
Security update for unzip
This update for unzip fixes the following issues:
- CVE-2018-18384: Fixed a buffer overflow when listing archives (bsc#1110194)
This update was imported from the SUSE:SLE-15:Update update project.
Список пакетов
openSUSE Leap 15.0
unzip-6.00-lp150.8.3
unzip-doc-6.00-lp150.8.3
unzip-rcc-6.00-lp150.8.3
Ссылки
- E-Mail link for openSUSE-SU-2019:1117-1
- SUSE Security Ratings
- SUSE Bug 1110194
- SUSE CVE CVE-2018-18384 page
Описание
Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12.
Затронутые продукты
openSUSE Leap 15.0:unzip-6.00-lp150.8.3
openSUSE Leap 15.0:unzip-doc-6.00-lp150.8.3
openSUSE Leap 15.0:unzip-rcc-6.00-lp150.8.3
Ссылки
- CVE-2018-18384
- SUSE Bug 1110194
- SUSE Bug 1148898
- SUSE Bug 1153715