Stay Secure with the Latest Linux Advisories

security advisorybuffer overflowcritical

Debian 10: DLA-3670-1 Critical: Minizip Heap Overflow Fix

An issue has been found in minizip, a compression library. When using long filenames, an integer overflow might happen, which results in a heap-based buffer overflow in zipOpenNewFileInZip4_64(). . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3670-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Thorsten Alteholz November 28, 2023 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package : minizip Version : 1.1-8+deb10u1 CVE ID : CVE-2023-45853 An issue has been found in minizip, a compression library. When using long filenames, an integer overflow might happen, which results in a heap-based buffer overflow in zipOpenNewFileInZip4_64(). For Debian 10 buster, this problem has been fixed in version 1.1-8+deb10u1. We recommend that you upgrade your minizip packages. For the detailed security status of minizip please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/minizip Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Debian LTS Advisory DLA-3671-3 for libpng addresses a severe integer overflow flaw associated with improper handling of image dimensions.. Debian LTS,minizip security,heap overflow fix. . Severity: Critical. LinuxSecurity.com Team

Nov 27, 2023 •Critical Debian LTS