< back to search

shield Security update for zziplib

SUSE-SLE-WE-12-SP3-2018-2425

This update for zziplib fixes the following issues: - CVE-2018-17828: Remove any "../" components from pathnames of extracted files to avoid path traversal during unpacking. (bsc#1110687)

Release Date

Oct 24 2018
References

Bugzilla: 1110687
CVEs: CVE-2018-17828
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Workstation Extension 12.3 x86_64

Packages

libzzip-0-13
Free zip compression library with easy to use API

0.13.67-10.14.1 lock rpm

zziplib
Free Zip Compression Library with an Easy-to-Use API

0.13.67-10.14.1 lock src