shield Security update for zziplib

SUSE-SLE-SDK-12-SP3-2018-619

This update for zziplib fixes the following issues: Security issues fixed: - CVE-2018-7726: There is a bus error caused by the__zzip_parse_root_directory function of zip.c. Attackers could leverage thisvulnerability to cause a denial of service (bsc#1084517). - CVE-2018-7725: An invalid memory address dereference was discovered in zzip_disk_fread in mmapped.c. The vulnerability causes an application crash, which leads to denial of service (bsc#1084519).

• Release Date
  Apr 11 2018
• References
  Bugzilla: 1084517, 1084519
  CVEs: CVE-2018-7726, CVE-2018-7725
• Type
  security
• Severity
  low

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.3 aarch64

• Packages
  libzzip-0-13
  Free zip compression library with easy to use API

  0.13.67-10.8.1

  lock rpm

  zziplib
  Free Zip Compression Library with an Easy-to-Use API

  0.13.67-10.8.1

  lock src

  zziplib-devel
  Free zip compression library with easy to use API

  0.13.67-10.8.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.3 ppc64le

• Packages
  libzzip-0-13
  Free zip compression library with easy to use API

  0.13.67-10.8.1

  lock rpm

  zziplib
  Free Zip Compression Library with an Easy-to-Use API

  0.13.67-10.8.1

  lock src

  zziplib-devel
  Free zip compression library with easy to use API

  0.13.67-10.8.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.3 s390x

• Packages
  libzzip-0-13
  Free zip compression library with easy to use API

  0.13.67-10.8.1

  lock rpm

  zziplib
  Free Zip Compression Library with an Easy-to-Use API

  0.13.67-10.8.1

  lock src

  zziplib-devel
  Free zip compression library with easy to use API

  0.13.67-10.8.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.3 x86_64

• Packages
  libzzip-0-13
  Free zip compression library with easy to use API

  0.13.67-10.8.1

  lock rpm

  zziplib
  Free Zip Compression Library with an Easy-to-Use API

  0.13.67-10.8.1

  lock src

  zziplib-devel
  Free zip compression library with easy to use API

  0.13.67-10.8.1

  lock rpm