shield Security update for zziplib

SUSE-SLE-SDK-12-SP4-2019-3341

This update for zziplib fixes the following issues: Security issues fixed: - CVE-2018-16548: Avoid a memory leak from __zzip_parse_root_directory() which could lead to denial of service. (bsc#1107424) - CVE-2018-7727: Fixed a memory leak in unzzip_cat() (bsc#1084515). Non-security issue fixed: - Prevented division by zero by first checking if uncompressed size is 0. This may happen with directories which have a compressed and uncompressed size of 0. (bsc#1129403)

• Release Date
  Dec 19 2019
• References
  Bugzilla: 1107424, 1084515, 1129403
  CVEs: CVE-2018-16548, CVE-2018-7727
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.4 x86_64

• Packages
  libzzip-0-13
  Free zip compression library with easy to use API

  0.13.67-10.25.1

  lock rpm

  zziplib
  Free Zip Compression Library with an Easy-to-Use API

  0.13.67-10.25.1

  lock src

  zziplib-devel
  Free zip compression library with easy to use API

  0.13.67-10.25.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.4 aarch64

• Packages
  libzzip-0-13
  Free zip compression library with easy to use API

  0.13.67-10.25.1

  lock rpm

  zziplib
  Free Zip Compression Library with an Easy-to-Use API

  0.13.67-10.25.1

  lock src

  zziplib-devel
  Free zip compression library with easy to use API

  0.13.67-10.25.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.4 ppc64le

• Packages
  libzzip-0-13
  Free zip compression library with easy to use API

  0.13.67-10.25.1

  lock rpm

  zziplib
  Free Zip Compression Library with an Easy-to-Use API

  0.13.67-10.25.1

  lock src

  zziplib-devel
  Free zip compression library with easy to use API

  0.13.67-10.25.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.4 s390x

• Packages
  libzzip-0-13
  Free zip compression library with easy to use API

  0.13.67-10.25.1

  lock rpm

  zziplib
  Free Zip Compression Library with an Easy-to-Use API

  0.13.67-10.25.1

  lock src

  zziplib-devel
  Free zip compression library with easy to use API

  0.13.67-10.25.1

  lock rpm