< back to search

shield Security update for perl-archive-zip

SUSE-SLE-Module-Basesystem-15-2018-1642

This update for perl-Archive-Zip fixes the following security issue: - CVE-2018-10860: Prevent directory traversal caused by not properly sanitizing paths while extracting zip files. An attacker able to provide a specially crafted archive for processing could have used this flaw to write or overwrite arbitrary files in the context of the perl interpreter (bsc#1099497)

Release Date

Aug 16 2018
References

Bugzilla: 1099497
CVEs: CVE-2018-10860
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Basesystem Module 15 aarch64

Packages

perl-Archive-Zip
Provide an interface to ZIP archive files

1.60-3.3.1 lock rpm lock src

Basesystem Module 15 x86_64

Packages

perl-Archive-Zip
Provide an interface to ZIP archive files

1.60-3.3.1 lock rpm lock src

Basesystem Module 15 ppc64le

Packages

perl-Archive-Zip
Provide an interface to ZIP archive files

1.60-3.3.1 lock rpm lock src

Basesystem Module 15 s390x

Packages

perl-Archive-Zip
Provide an interface to ZIP archive files

1.60-3.3.1 lock rpm lock src