shield Security update for zziplib

SUSE-SLE-SDK-12-SP3-2018-357

This update for zziplib fixes the following issues: Version update to 0.13.67 contains lots of bug- and security fixes. - If an extension block is too small to hold an extension, do not use the information therein. - CVE-2018-6540: If the End of central directory record (EOCD) contains an Offset of start of central directory which is beyond the end of the file, reject the file. (bsc#1079096) - CVE-2018-6484: Reject the ZIP file and report it as corrupt if the size of the central directory and/or the offset of start of central directory point beyond the end of the ZIP file. (bsc#1078701) - CVE-2018-6381: If a file is uncompressed, compressed and uncompressed sizes should be identical. (bsc#1078497)

• Release Date
  Feb 27 2018
• References
  Bugzilla: 1024532, 1024536, 1079096, 1034539, 1078497, 1078701
  CVEs: CVE-2018-6484, CVE-2018-6540, CVE-2018-6381
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.3 aarch64

• Packages
  libzzip-0-13
  Free zip compression library with easy to use API

  0.13.67-10.5.1 lock rpm

  zziplib
  Free Zip Compression Library with an Easy-to-Use API

  0.13.67-10.5.1 lock src

  zziplib-devel
  Free zip compression library with easy to use API

  0.13.67-10.5.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.3 ppc64le

• Packages
  libzzip-0-13
  Free zip compression library with easy to use API

  0.13.67-10.5.1 lock rpm

  zziplib
  Free Zip Compression Library with an Easy-to-Use API

  0.13.67-10.5.1 lock src

  zziplib-devel
  Free zip compression library with easy to use API

  0.13.67-10.5.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.3 s390x

• Packages
  libzzip-0-13
  Free zip compression library with easy to use API

  0.13.67-10.5.1 lock rpm

  zziplib
  Free Zip Compression Library with an Easy-to-Use API

  0.13.67-10.5.1 lock src

  zziplib-devel
  Free zip compression library with easy to use API

  0.13.67-10.5.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.3 x86_64

• Packages
  libzzip-0-13
  Free zip compression library with easy to use API

  0.13.67-10.5.1 lock rpm

  zziplib
  Free Zip Compression Library with an Easy-to-Use API

  0.13.67-10.5.1 lock src

  zziplib-devel
  Free zip compression library with easy to use API

  0.13.67-10.5.1 lock rpm