USN-3320-1: zziplib vulnerabilities
USN-3320-1: zziplib vulnerabilities Ubuntu Security Notice USN-3320-1 15th June, 2017 zziplib vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 17.04 Ubuntu 16.10 Ubuntu 16.04 LTS Ubuntu 14.04 LTS Summary zziplib could be made to crash or run programs as your login if it opened a specially crafted file. Software description zziplib – library providing read access on ZIP-archives Details Agostino Sarubbo discovered that zziplib incorrectly handled certainmalformed ZIP files. If a user or automated system were tricked intoopening a specially crafted ZIP file, a remote attacker could cause zziplibto crash, resulting in a denial of service, or possibly execute arbitrarycode. Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu 17.04: libzzip-0-13 0.13.62-3ubuntu0.17.04.1 Ubuntu 16.10: libzzip-0-13 0.13.62-3ubuntu0.16.10.1 Ubuntu 16.04 LTS: libzzip-0-13 0.13.62-3ubuntu0.16.04.1 Ubuntu 14.04 LTS: libzzip-0-13 0.13.62-2ubuntu0.1 To [ more… ]