Format: 1.8 Date: Fri, 29 Jun 2018 12:27:02 -0400 Source: zziplib Binary: zziplib-bin libzzip-0-13 libzzip-dev Architecture: ppc64el Version: 0.13.62-3.1ubuntu0.17.10.1 Distribution: artful Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: libzzip-0-13 - library providing read access on ZIP-archives - library libzzip-dev - library providing read access on ZIP-archives - development zziplib-bin - library providing read access on ZIP-archives - binaries Changes: zziplib (0.13.62-3.1ubuntu0.17.10.1) artful-security; urgency=medium . * SECURITY UPDATE: invalid mem access in zzip_disk_fread - debian/patches/CVE-2018-6381.patch: check sizes in zzip/memdisk.c. - CVE-2018-6381 * SECURITY UPDATE: alignment and bus errors in __zzip_fetch_disk_trailer - debian/patches/CVE-2018-6484.patch: check sizes in zzip/zip.c. - CVE-2018-6484 - CVE-2018-6541 - CVE-2018-6869 * SECURITY UPDATE: bus error in zzip_disk_findfirst - debian/patches/CVE-2018-6540.patch: check endbuf in zzip/mmapped.c. - CVE-2018-6540 * SECURITY UPDATE: invalid memory dereference - debian/patches/CVE-2018-7725.patch: check zlib space in zzip/memdisk.c, zzip/mmapped.c. - CVE-2018-7725 * SECURITY UPDATE: bus error in __zzip_parse_root_directory - debian/patches/CVE-2018-7726-1.patch: check rootseek and rootsize in zzip/zip.c. - debian/patches/CVE-2018-7726-2.patch: check rootseek in zzip/zip.c. - debian/patches/CVE-2018-7726-3.patch: check zz_rootsize in zzip/zip.c. - CVE-2018-7726 Checksums-Sha1: 1126ddd7b761755ad1cfe719e0b4475a719715d4 6114 libzzip-0-13-dbgsym_0.13.62-3.1ubuntu0.17.10.1_ppc64el.ddeb afc95688b9a1c4f3adb9b8601d21d201881530c6 25676 libzzip-0-13_0.13.62-3.1ubuntu0.17.10.1_ppc64el.deb 5011740c000ff815c5cf4ee95a992bc431d3d50c 84648 libzzip-dev_0.13.62-3.1ubuntu0.17.10.1_ppc64el.deb e5b0e0decfe54b3d87b4872f2755d8d90d46a0f9 4576 zziplib-bin-dbgsym_0.13.62-3.1ubuntu0.17.10.1_ppc64el.ddeb 5963f80c67aa34197016470f6f67917870fa6938 12470 zziplib-bin_0.13.62-3.1ubuntu0.17.10.1_ppc64el.deb 251f36d7643eb17aba219ddf4e1e7d5b83a5accc 6688 zziplib_0.13.62-3.1ubuntu0.17.10.1_ppc64el.buildinfo Checksums-Sha256: 35706e7fec076c9f5d38896c9ae0bb3ae38d1b9eac43f5557a7d5e42a4dd39f6 6114 libzzip-0-13-dbgsym_0.13.62-3.1ubuntu0.17.10.1_ppc64el.ddeb fdf7ba04b2299b9609eeece392a4d9287ad7ed02b833c1f89d6007145659bf50 25676 libzzip-0-13_0.13.62-3.1ubuntu0.17.10.1_ppc64el.deb 50c4567a2bbadb178225506e6768450525d633d04dd1470269b733685abdf2b6 84648 libzzip-dev_0.13.62-3.1ubuntu0.17.10.1_ppc64el.deb 442ddef61c516b140eecc53450699c0dc83b5f05e5ceab0e330bfb7c51d073cf 4576 zziplib-bin-dbgsym_0.13.62-3.1ubuntu0.17.10.1_ppc64el.ddeb 7ec240dab9c45e987152f81947378b3f65a04619e11567745601e4b0a23bb94d 12470 zziplib-bin_0.13.62-3.1ubuntu0.17.10.1_ppc64el.deb 23feef5b71782d48c722a83606b591af0664ff0f3948f6a34c1762a7e7dec07e 6688 zziplib_0.13.62-3.1ubuntu0.17.10.1_ppc64el.buildinfo Files: 2df8d5bbe1708db5daffb523305c35df 6114 debug extra libzzip-0-13-dbgsym_0.13.62-3.1ubuntu0.17.10.1_ppc64el.ddeb 05ab5919eac279551881f37a7aec68a8 25676 libs optional libzzip-0-13_0.13.62-3.1ubuntu0.17.10.1_ppc64el.deb 4c4fdbc87a82e2388afa59a67b3a9a05 84648 libdevel optional libzzip-dev_0.13.62-3.1ubuntu0.17.10.1_ppc64el.deb 26575fa9ef1c06d767c599e7c0599791 4576 debug extra zziplib-bin-dbgsym_0.13.62-3.1ubuntu0.17.10.1_ppc64el.ddeb a9a4d9b8a5217c43df3c971bfbff4269 12470 utils optional zziplib-bin_0.13.62-3.1ubuntu0.17.10.1_ppc64el.deb f941ae6c676cb7c430a9fae97479bf65 6688 libs optional zziplib_0.13.62-3.1ubuntu0.17.10.1_ppc64el.buildinfo Original-Maintainer: Scott Howard