Ubuntu
zziplib package

zziplib 0.13.62-3.1ubuntu1 source package in Ubuntu

Changelog

zziplib (0.13.62-3.1ubuntu1) cosmic; urgency=medium

  * SECURITY UPDATE: invalid mem access in zzip_disk_fread
    - debian/patches/CVE-2018-6381.patch: check sizes in zzip/memdisk.c.
    - CVE-2018-6381
  * SECURITY UPDATE: alignment and bus errors in __zzip_fetch_disk_trailer
    - debian/patches/CVE-2018-6484.patch: check sizes in zzip/zip.c.
    - CVE-2018-6484
    - CVE-2018-6541
    - CVE-2018-6869
  * SECURITY UPDATE: bus error in zzip_disk_findfirst
    - debian/patches/CVE-2018-6540.patch: check endbuf in zzip/mmapped.c.
    - CVE-2018-6540
  * SECURITY UPDATE: invalid memory dereference
    - debian/patches/CVE-2018-7725.patch: check zlib space in
      zzip/memdisk.c, zzip/mmapped.c.
    - CVE-2018-7725
  * SECURITY UPDATE: bus error in __zzip_parse_root_directory
    - debian/patches/CVE-2018-7726-1.patch: check rootseek and rootsize in
      zzip/zip.c.
    - debian/patches/CVE-2018-7726-2.patch: check rootseek in zzip/zip.c.
    - debian/patches/CVE-2018-7726-3.patch: check zz_rootsize in
      zzip/zip.c.
    - CVE-2018-7726

 -- Marc Deslauriers <email address hidden>  Fri, 29 Jun 2018 11:26:58 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Cosmic
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
zziplib_0.13.62.orig.tar.bz2 669.7 KiB a1b8033f1a1fd6385f4820b01ee32d8eca818409235d22caf5119e0078c7525b
zziplib_0.13.62-3.1ubuntu1.debian.tar.xz 15.1 KiB 58bc69ccc941522e90fda8dc33aa5526d6e8fc3946072302dfbd187158b97388
zziplib_0.13.62-3.1ubuntu1.dsc 2.1 KiB c97ac88c24b19c4f90b2e693b1b434b96e96ccb78274294066af6e3cd74ddfd8

View changes file

Binary packages built by this source

libzzip-0-13: No summary available for libzzip-0-13 in ubuntu disco.

No description available for libzzip-0-13 in ubuntu disco.

libzzip-0-13-dbgsym: No summary available for libzzip-0-13-dbgsym in ubuntu cosmic.

No description available for libzzip-0-13-dbgsym in ubuntu cosmic.

libzzip-dev: No summary available for libzzip-dev in ubuntu cosmic.

No description available for libzzip-dev in ubuntu cosmic.

zziplib-bin: No summary available for zziplib-bin in ubuntu disco.

No description available for zziplib-bin in ubuntu disco.

zziplib-bin-dbgsym: No summary available for zziplib-bin-dbgsym in ubuntu disco.

No description available for zziplib-bin-dbgsym in ubuntu disco.