Security update for libzip
This update for libzip fixes the following security issue:
- CVE-2017-14107: The _zip_read_eocd64 function mishandled EOCD records, which
allowed remote attackers to cause a denial of service (memory allocation
failure in _zip_cdir_grow in zip_dirent.c) via a crafted ZIP archive (bsc#1056996).
This update was imported from the SUSE:SLE-12:Update update project.
-
Submitted by
Petr Gajdos (pgajdos)
Fixed bugs
bnc#1056996
VUL-0: CVE-2017-14107: libzip: The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0mishandles EOCD records, which allows remote attackers to cause adenial of service (memory allocation failure in _zip_cdir_grow inzip_dirent
