Zziplib Security Update for Debian 7 LTS
Posted on: 02/21/2018 10:33 AM

Updated zziplib packages has been released for Debian GNU/Linux 7 LTS

Package : zziplib
Version : 0.13.56-1.1+deb7u2
CVE ID : CVE-2018-6869

It was discovered that there was a uncontrolled memory allocation issue
in zziplib, a ZIP archive library. Remote attackers could leverage this
vulnerability to cause a denial of service via a specially-crafted file.

For Debian 7 "Wheezy", this issue has been fixed in zziplib version
0.13.56-1.1+deb7u2.

We recommend that you upgrade your zziplib packages.



Printed from Linux Compatible (https://www.linuxcompatible.org/news/story/zziplib_security_update_for_debian_7_lts.html)