Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Fedora 25 FEDORA-2017-bb5d87e9de Critical: Mingw-Libzip Memory Allocation

fedora
Calendar Grey September 19, 2017
Dist Fedora Esm H88
This patch addresses an urgent buffer overflow vulnerability in mingw-libarchive for Fedora 25, improving general system robustness.
This update fixes CVE-2017-14107.

Summary

libzip is a C library for reading, creating, and modifying zip archives. Files

can be added from data buffers, files, or compressed data copied directly from

other zip archives. Changes made without closing the archive can be reverted.

The API is documented by man pages.

This update fixes CVE-2017-14107.

[ 1 ] Bug #1489002 - CVE-2017-14107 mingw-libzip: libzip: Memory allocation failure in _zip_cdir_grow function [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1489002

su -c 'dnf upgrade mingw-libzip' at the command line.

For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 25
Version: 1.1.3
Release: 3.fc25
Summary: C library for reading, creating, and modifying zip archives

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here