Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2019:2396-1

Опубликовано: 28 окт. 2019
Источник: suse-cvrf

Описание

Security update for zziplib

This update for zziplib fixes the following issues:

Security issue fixed:

  • CVE-2018-16548: Prevented memory leak from __zzip_parse_root_directory(). Free allocated structure if its address is not passed back. (bsc#1107424)

Other issue addressed:

  • Prevented a division by zero (bsc#1129403).

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.1
libzzip-0-13-0.13.69-lp151.4.3.1
libzzip-0-13-32bit-0.13.69-lp151.4.3.1
zziplib-devel-0.13.69-lp151.4.3.1
zziplib-devel-32bit-0.13.69-lp151.4.3.1

Ссылки

Описание

An issue was discovered in ZZIPlib through 0.13.69. There is a memory leak triggered in the function __zzip_parse_root_directory in zip.c, which will lead to a denial of service attack.

Затронутые продукты
openSUSE Leap 15.1:libzzip-0-13-0.13.69-lp151.4.3.1
openSUSE Leap 15.1:libzzip-0-13-32bit-0.13.69-lp151.4.3.1
openSUSE Leap 15.1:zziplib-devel-0.13.69-lp151.4.3.1
openSUSE Leap 15.1:zziplib-devel-32bit-0.13.69-lp151.4.3.1
Ссылки