< back to search

shield Security update for unzip

SUSE-SLE-SERVER-12-2015-12

This update fixes the following security issues: - CVE-2014-8139: fix heap overflow condition in the CRC32 verification (fixes bnc#909214) - CVE-2014-8140 and CVE-2014-8141: fix write error (*_8349_*) shows a problem in extract.c:test_compr_eb(), and: read errors (*_6430_*, *_3422_*) show problems in process.c:getZip64Data() (fixes bnc#909214)

Release Date

Jan 7 2015
References

Bugzilla: 909214
CVEs: CVE-2014-8139, CVE-2014-8141, CVE-2014-8140
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Server 12 s390x

Packages

unzip
A program to unpack compressed files

6.00-28.1 lock rpm lock src

SUSE Linux Enterprise Server 12 ppc64le

Packages

unzip
A program to unpack compressed files

6.00-28.1 lock rpm lock src

SUSE Linux Enterprise Server for SAP Applications 12 x86_64

Packages

unzip
A program to unpack compressed files

6.00-28.1 lock rpm lock src