shield Security update for perl-archive-zip

SUSE-SLE-SERVER-12-SP3-2018-1641

This update for perl-Archive-Zip fixes the following security issue: - CVE-2018-10860: Prevent directory traversal caused by not properly sanitizing paths while extracting zip files. An attacker able to provide a specially crafted archive for processing could have used this flaw to write or overwrite arbitrary files in the context of the perl interpreter (bsc#1099497)

• Release Date
  Aug 16 2018
• References
  Bugzilla: 1099497
  CVEs: CVE-2018-10860
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12.3 ppc64le

• Packages
  perl-Archive-Zip
  Provide an interface to ZIP archive files.

  1.34-3.3.1 lock rpm lock src

SUSE Linux Enterprise Server 12.3 s390x

• Packages
  perl-Archive-Zip
  Provide an interface to ZIP archive files.

  1.34-3.3.1 lock rpm lock src

SUSE Linux Enterprise Server 12.3 aarch64

• Packages
  perl-Archive-Zip
  Provide an interface to ZIP archive files.

  1.34-3.3.1 lock rpm lock src

SUSE Linux Enterprise Server 12.3 x86_64

• Packages
  perl-Archive-Zip
  Provide an interface to ZIP archive files.

  1.34-3.3.1 lock rpm lock src