Commit Graph

3 Commits

Author SHA1 Message Date
sthen
7d45705a7c SECURITY update to libzip 0.10.1
CVE-2012-1162 heap overflow on corrupted zip files
CVE-2012-1163 integer overflow

more info at http://www.openwall.com/lists/oss-security/2012/03/21/2
2012-03-21 10:30:22 +00:00
jasper
29fe8310c6 - update libzip to 0.10.0, fixes CVE-2011-0421,
libzip "_zip_name_locate()" NULL Pointer Dereference Vulnerability
2011-03-22 09:20:15 +00:00
jasper
fb6d30f3b5 import libzip 0.9.3
libzip is a C library for reading, creating, and modifying zip archives.
Files can be added from data buffers, files, or compressed data copied
directly from other zip archives. Changes made without closing the
archive can be reverted.

ok sthen@
2010-11-27 09:16:57 +00:00