Security update for zziplib SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:0548-1 Final 1 1 2018-02-27T09:45:19Z current 2018-02-27T09:45:19Z 2018-02-27T09:45:19Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for zziplib This update for zziplib fixes the following issues: Version update to 0.13.67 contains lots of bug- and security fixes. - If an extension block is too small to hold an extension, do not use the information therein. - CVE-2018-6540: If the End of central directory record (EOCD) contains an Offset of start of central directory which is beyond the end of the file, reject the file. (bsc#1079096) - CVE-2018-6484: Reject the ZIP file and report it as corrupt if the size of the central directory and/or the offset of start of central directory point beyond the end of the ZIP file. (bsc#1078701) - CVE-2018-6381: If a file is uncompressed, compressed and uncompressed sizes should be identical. (bsc#1078497) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-DESKTOP-12-SP2-2018-357,SUSE-SLE-DESKTOP-12-SP3-2018-357,SUSE-SLE-SDK-12-SP2-2018-357,SUSE-SLE-SDK-12-SP3-2018-357,SUSE-SLE-WE-12-SP2-2018-357,SUSE-SLE-WE-12-SP3-2018-357 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20180548-1/ Link for SUSE-SU-2018:0548-1 https://lists.suse.com/pipermail/sle-security-updates/2018-February/003754.html E-Mail link for SUSE-SU-2018:0548-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1024532 SUSE Bug 1024532 https://bugzilla.suse.com/1024536 SUSE Bug 1024536 https://bugzilla.suse.com/1034539 SUSE Bug 1034539 https://bugzilla.suse.com/1078497 SUSE Bug 1078497 https://bugzilla.suse.com/1078701 SUSE Bug 1078701 https://bugzilla.suse.com/1079096 SUSE Bug 1079096 https://www.suse.com/security/cve/CVE-2018-6381/ SUSE CVE CVE-2018-6381 page https://www.suse.com/security/cve/CVE-2018-6484/ SUSE CVE CVE-2018-6484 page https://www.suse.com/security/cve/CVE-2018-6540/ SUSE CVE CVE-2018-6540 page SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 libzzip-0-13-0.13.67-10.5.1 zziplib-devel-0.13.67-10.5.1 libzzip-0-13-0.13.67-10.5.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 libzzip-0-13-0.13.67-10.5.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libzzip-0-13-0.13.67-10.5.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 zziplib-devel-0.13.67-10.5.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 libzzip-0-13-0.13.67-10.5.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 zziplib-devel-0.13.67-10.5.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libzzip-0-13-0.13.67-10.5.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP2 libzzip-0-13-0.13.67-10.5.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP3 In ZZIPlib 0.13.67, 0.13.66, 0.13.65, 0.13.64, 0.13.63, 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57 and 0.13.56 there is a segmentation fault caused by invalid memory access in the zzip_disk_fread function (zzip/mmapped.c) because the size variable is not validated against the amount of file->stored data. CVE-2018-6381 SUSE Linux Enterprise Desktop 12 SP2:libzzip-0-13-0.13.67-10.5.1 SUSE Linux Enterprise Desktop 12 SP3:libzzip-0-13-0.13.67-10.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libzzip-0-13-0.13.67-10.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:zziplib-devel-0.13.67-10.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libzzip-0-13-0.13.67-10.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:zziplib-devel-0.13.67-10.5.1 SUSE Linux Enterprise Workstation Extension 12 SP2:libzzip-0-13-0.13.67-10.5.1 SUSE Linux Enterprise Workstation Extension 12 SP3:libzzip-0-13-0.13.67-10.5.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180548-1/ https://www.suse.com/security/cve/CVE-2018-6381.html CVE-2018-6381 https://bugzilla.suse.com/1078497 SUSE Bug 1078497 https://bugzilla.suse.com/1079094 SUSE Bug 1079094 In ZZIPlib 0.13.67, there is a memory alignment error and bus error in the __zzip_fetch_disk_trailer function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file. CVE-2018-6484 SUSE Linux Enterprise Desktop 12 SP2:libzzip-0-13-0.13.67-10.5.1 SUSE Linux Enterprise Desktop 12 SP3:libzzip-0-13-0.13.67-10.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libzzip-0-13-0.13.67-10.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:zziplib-devel-0.13.67-10.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libzzip-0-13-0.13.67-10.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:zziplib-devel-0.13.67-10.5.1 SUSE Linux Enterprise Workstation Extension 12 SP2:libzzip-0-13-0.13.67-10.5.1 SUSE Linux Enterprise Workstation Extension 12 SP3:libzzip-0-13-0.13.67-10.5.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180548-1/ https://www.suse.com/security/cve/CVE-2018-6484.html CVE-2018-6484 https://bugzilla.suse.com/1078701 SUSE Bug 1078701 https://bugzilla.suse.com/1079094 SUSE Bug 1079094 https://bugzilla.suse.com/1079095 SUSE Bug 1079095 https://bugzilla.suse.com/1080546 SUSE Bug 1080546 In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address in the zzip_disk_findfirst function of zzip/mmapped.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file. CVE-2018-6540 SUSE Linux Enterprise Desktop 12 SP2:libzzip-0-13-0.13.67-10.5.1 SUSE Linux Enterprise Desktop 12 SP3:libzzip-0-13-0.13.67-10.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libzzip-0-13-0.13.67-10.5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:zziplib-devel-0.13.67-10.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libzzip-0-13-0.13.67-10.5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:zziplib-devel-0.13.67-10.5.1 SUSE Linux Enterprise Workstation Extension 12 SP2:libzzip-0-13-0.13.67-10.5.1 SUSE Linux Enterprise Workstation Extension 12 SP3:libzzip-0-13-0.13.67-10.5.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180548-1/ https://www.suse.com/security/cve/CVE-2018-6540.html CVE-2018-6540 https://bugzilla.suse.com/1079094 SUSE Bug 1079094 https://bugzilla.suse.com/1079096 SUSE Bug 1079096