Ubuntu
zziplib package

zziplib 0.13.62-3.1ubuntu0.17.10.1 source package in Ubuntu

Changelog

zziplib (0.13.62-3.1ubuntu0.17.10.1) artful-security; urgency=medium

  * SECURITY UPDATE: invalid mem access in zzip_disk_fread
    - debian/patches/CVE-2018-6381.patch: check sizes in zzip/memdisk.c.
    - CVE-2018-6381
  * SECURITY UPDATE: alignment and bus errors in __zzip_fetch_disk_trailer
    - debian/patches/CVE-2018-6484.patch: check sizes in zzip/zip.c.
    - CVE-2018-6484
    - CVE-2018-6541
    - CVE-2018-6869
  * SECURITY UPDATE: bus error in zzip_disk_findfirst
    - debian/patches/CVE-2018-6540.patch: check endbuf in zzip/mmapped.c.
    - CVE-2018-6540
  * SECURITY UPDATE: invalid memory dereference
    - debian/patches/CVE-2018-7725.patch: check zlib space in
      zzip/memdisk.c, zzip/mmapped.c.
    - CVE-2018-7725
  * SECURITY UPDATE: bus error in __zzip_parse_root_directory
    - debian/patches/CVE-2018-7726-1.patch: check rootseek and rootsize in
      zzip/zip.c.
    - debian/patches/CVE-2018-7726-2.patch: check rootseek in zzip/zip.c.
    - debian/patches/CVE-2018-7726-3.patch: check zz_rootsize in
      zzip/zip.c.
    - CVE-2018-7726

 -- Marc Deslauriers <email address hidden>  Fri, 29 Jun 2018 12:27:02 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Artful
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
zziplib_0.13.62.orig.tar.bz2 669.7 KiB a1b8033f1a1fd6385f4820b01ee32d8eca818409235d22caf5119e0078c7525b
zziplib_0.13.62-3.1ubuntu0.17.10.1.debian.tar.xz 15.2 KiB 88686d7ef64840f265aafa29d5c95338c186184cb1dd842256fe48a761a8d802
zziplib_0.13.62-3.1ubuntu0.17.10.1.dsc 2.1 KiB e6f7f828464c61270b28e99dc282a1823f75f67af2d4a5eb11cc4c2f288d33bd

View changes file

Binary packages built by this source

libzzip-0-13: No summary available for libzzip-0-13 in ubuntu artful.

No description available for libzzip-0-13 in ubuntu artful.

libzzip-0-13-dbgsym: No summary available for libzzip-0-13-dbgsym in ubuntu artful.

No description available for libzzip-0-13-dbgsym in ubuntu artful.

libzzip-dev: No summary available for libzzip-dev in ubuntu artful.

No description available for libzzip-dev in ubuntu artful.

zziplib-bin: No summary available for zziplib-bin in ubuntu artful.

No description available for zziplib-bin in ubuntu artful.

zziplib-bin-dbgsym: No summary available for zziplib-bin-dbgsym in ubuntu artful.

No description available for zziplib-bin-dbgsym in ubuntu artful.