Package name
zziplib
Date
2007-04-23
Advisory ID
MDKSA-2007:093
Affected versions
CS4.0 x86_64 , CS4.0 i586

Problem description

A stack-based buffer overflow in the ZZIPlib library could allow
user-assisted remote attackers to cause an application crash (DoS)
or execute arbitrary code via a long filename.

Updated packages have been patched to correct this issue.

Updated packages

CS4.0 x86_64

 91e3feceacc5f9fd7629525d1be8b951  corporate/4.0/x86_64/zziplib0-0.13.33-4.1.20060mlcs4.x86_64.rpm
 641b79b72b74306264f8cc40b89ecf68  corporate/4.0/x86_64/zziplib0-devel-0.13.33-4.1.20060mlcs4.x86_64.rpm 
 c17957866cab01574723960484e792a9  corporate/4.0/SRPMS/zziplib-0.13.33-4.1.20060mlcs4.src.rpm

CS4.0 i586

 a0ac9e92d0beee7726739000791e6748  corporate/4.0/i586/zziplib0-0.13.33-4.1.20060mlcs4.i586.rpm
 1518189e431ccd97aa491a4591de80d6  corporate/4.0/i586/zziplib0-devel-0.13.33-4.1.20060mlcs4.i586.rpm 
 c17957866cab01574723960484e792a9  corporate/4.0/SRPMS/zziplib-0.13.33-4.1.20060mlcs4.src.rpm

References