Change logs for zziplib source package in Artful

  • zziplib (0.13.62-3.1ubuntu0.17.10.1) artful-security; urgency=medium
    
      * SECURITY UPDATE: invalid mem access in zzip_disk_fread
        - debian/patches/CVE-2018-6381.patch: check sizes in zzip/memdisk.c.
        - CVE-2018-6381
      * SECURITY UPDATE: alignment and bus errors in __zzip_fetch_disk_trailer
        - debian/patches/CVE-2018-6484.patch: check sizes in zzip/zip.c.
        - CVE-2018-6484
        - CVE-2018-6541
        - CVE-2018-6869
      * SECURITY UPDATE: bus error in zzip_disk_findfirst
        - debian/patches/CVE-2018-6540.patch: check endbuf in zzip/mmapped.c.
        - CVE-2018-6540
      * SECURITY UPDATE: invalid memory dereference
        - debian/patches/CVE-2018-7725.patch: check zlib space in
          zzip/memdisk.c, zzip/mmapped.c.
        - CVE-2018-7725
      * SECURITY UPDATE: bus error in __zzip_parse_root_directory
        - debian/patches/CVE-2018-7726-1.patch: check rootseek and rootsize in
          zzip/zip.c.
        - debian/patches/CVE-2018-7726-2.patch: check rootseek in zzip/zip.c.
        - debian/patches/CVE-2018-7726-3.patch: check zz_rootsize in
          zzip/zip.c.
        - CVE-2018-7726
    
     -- Marc Deslauriers <email address hidden>  Fri, 29 Jun 2018 12:27:02 -0400
  • zziplib (0.13.62-3.1) unstable; urgency=medium
    
      * Non-maintainer upload.
      * Fix multiple security issues (Closes: #854727). Thanks to Josef
        Moellers of SuSE for the patches!
    
     -- Moritz Muehlenhoff <email address hidden>  Sun, 04 Jun 2017 09:03:20 +0200
  • zziplib (0.13.62-3) unstable; urgency=medium
    
    
      * debian/rules: Lintian error cleaning pkg-config-bad-directive
    
     -- Scott Howard <email address hidden>  Sun, 24 Aug 2014 22:20:40 -0400