Stay Secure with the Latest Linux Advisories

security advisoryupdateFedora

Fedora 27 Zziplib Security Update Critical: Memory Allocation Issues

Security fix for CVE-2018-6869, CVE-2018-6484. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-8d544ee879 2018-02-20 17:10:59.957155 --------------------------------------------------------------------------------Name : zziplib Product : Fedora 27 Version : 0.13.68 Release : 1.fc27 URL : Summary : Lightweight library to easily extract data from zip files Description : The zziplib library is intentionally lightweight, it offers the ability to easily extract data from files archived in a single zip file. Applications can bundle files into a single zip archive and access them. The implementation is based only on the (free) subset of compression with the zlib algorithm which is actually used by the zip/unzip tools. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2018-6869, CVE-2018-6484 --------------------------------------------------------------------------------References: [ 1 ] Bug #1543941 - CVE-2018-6869 zziplib: uncontrolled memory allocation in __zzip_parse_root_directory in zzip/zip.c https://bugzilla.redhat.com/show_bug.cgi?id=1543941 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade zziplib' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. .Enhance zziplib on Fedora 27 to address severe security vulnerabilities such as unregulated memory allocation threats.. zziplib Security Update, Fedora 27, Memory Allocation Fix. . Severity: Critical. LinuxSecurity.com Team

Feb 20, 2018 •Critical Fedora